Revision 2916

Update for robotCA instead of onlineCA, i.e. using robot cert instead of real CA
cert:
- cafrontend_env.yml:
  remove unused myproxy_ca_cn and add robot_tarball
- delegserver_env.yml:
  update hostname
- update egi: update hostname
- roles/cafrontend/handlers/main.yml: add restart myproxy server handler
- fix some typos
- copy hostcert/key using a new task hostcreds.yml
- adapt myproxy.yml to rerun when the serial does not exist (the cacert is
  extracted from the robots tarball)
- add gpg key for shibboleth repo and install using a copy task (see repos.yml)
- don't create repos using 'yumrepo' from ansible extras (very unstable) but use
  a simple template: security_shibboleth.repo.j2 and eugridpma.repo.j2
- don't use IGTF repositories (util) and IGTF repositories (lcg)
- replace robot task with extracting the tarball
- update simple_ca_setup.sh.j2 for using robot cert instead of cacert.
- update README for egi instead of Nikhef
- update typo in ansible.cfg