Migrate default snowflake broker (and bridge?) to TPA machines

We've talked about this off and on in the past and there are a few good reasons for doing it:

• Have redundant access and permissions to the DNS/hosts for the default broker and bridge URLs
• Right now we are having an issue with the existing bamsoftware.com subdomains due to a Google safe browsing service blacklist (#31230 (moved))