ssl::service should enforce a notify resource

I don't have an issue on hand, but we keep stumbling upon this trap that we deploy a ssl::service without a notify parameter, which makes Puppet properly deploy the cert, but fail to restart the correct service.

We should have an enforced service dependency on there. It might be possible to opt out, but it shouldn't be the default as it is now.

Also note that the ssl::service resource has a notify parameter, but it actually does nothing because notify is a reserved parameter. So at the very least that parameter can be removed already, because it's just causing confusion. But perhaps the simplest fix is just to rename that parameter.