Refactor split sshpiper
This PR introduces a new role proxy_firewall_rules to manage Shorewall configurations specifically for the head node of the COD cluster. It also removes Shorewall-related tasks from the sshpiper role to improve modularity and separation of concerns.