Only updating python-mysql if we aren't on jenkins

At 30 minutes we still hit it sometimes when building from a bare ubuntu box.

Defaulting it to hammer for now.

The clone script now takes explicit arguments for subnet, security group
and there is a dedicated vpc in the prod account for database clones

The instance gets tagged with the repo and hash that was deployed.

Instead, we take any extra_vars that have a suffix of '_version' and
make sure those exist as tags on the AMI. All other vars do not get
saved anywhere.

Turn on instance tagging with abbey.

Also use the proper return code when abbey has issues.