Refactor Puppet code for the Jenkins slave on builder.lizard

Originally created by @intrigeri on #7106 (Redmine)

See parent ticket for the rationale.

https://github.com/boklm/puppet-sshkeys will probably be needed.

Parent Task: tails/sysadmin#6056