fix the permission issue while creating the route53 records

Improvements for s3cmd in the "aws" role

Be able to run jailed code in the CMS as well.

Expose STATICFILES_STORAGE in credentials settings

Work around a supervisord bug causing the provisioning to hang intermittently.

update s3 configuration to use custom credentials s3 backends

New playbook and role for go-server

New playbook and role for go-agent

Install optional credentials requirements

Jibsheet/migrate multiple databases

OPS-727 Sandbox platform name and logo

ECOM-3778

N.B. This may break docker-based devstacks. Fix TBD.

pre_supervisor expects to run the migrate tests as the supervisor user,
which does not have sudo.  Add an env variable flag that allows you to
claim "I know what I'm doing, don't sudo".

migrate-edxapp-lms is templated to know if a given image points to 1, 2
or even 3 databases.  We don't have that knowledge in pre_supervisor
without parsing lms.auth.json for DATABASES and adding a bunch of
special-case logic.

This dates from when our code was if lms/cms, else xque, else
new_service.  Now that lms/cms are lumped into new_services, name it
services.

This allows us to run `edxapp-migrate-lms --list` for migration checking

When we have multiple DBs, this will do the right thing.

Does so by running the edxapp role just to generate config (as
controlled by check-migrations.sh's use of the --tag) and then
the tasks in the playbook are hardcoded to always run, regardless
of the tag.  Because the edxapp play has run, the tasks have
access to the various config variables containing DATABASES
and can tell what DBs are in use.

Skip the read replica

Fix analyticstack

Update readme to match the current state of things.

Include ORGANIZATIONS_API_URL_ROOT in programs defaults

This setting is used when requesting data from the LMS Organizations API.

restructure notes_api deployment