Jibsheet/disable automated upgrade 16.04

Backport fixes from e0d/xenial that enable the automated dockerfile

Fix typo in yarn-site.xml template.

instruct nginx to add a X-Queue-Start header

This header gets added to requests proxied by nginx to various edx apps.
The New Relic agent, if there is one, reads this header to calculate the
time each request spends between the web server (nginx) and the
application server (django or some other cms).

The specific intention of this commit is to measure the time requests
spend queued at the gunicorn layer.

Make sure we become the application user

Avoid using the same register twice.

Script for assuming role by an automated process

Tags is an argument to ec2_tag not to the task

fix error on zero rate limited agents

On Docker images, it might not be present, so we don't need to modify it.

Also fix a bug with "sshd_config" being used as a register twice, so the second
usage overwrites the result of the first one.

Print error message in the case where we return empty

Adds support for the COMPREHENSIVE_THEME_LOCALE_PATHS setting

Enable tagging of AWS Internet Gateways

[OPS-1711]: user agents to be rate limited

Make sure user has correct associated group

Using bin_path in the apparmor template

When apparmor is pointed at a symlink, it doesn't guard execution of the
target of that symlink. But when apparmor is pointed to an executable
that has symlinks, execution of those symlinks IS guarded. Therefore, we
dereference symlinks to executables before putting them in the apparmor
template.

Reduce SHA1s tagged on images to 7 characters. TE-1717

turn off logging for ec2 facts