gluon-mesh-batman-adv should not be used without firewall to prevent forwarding
of packets from the mesh to the wan interface.

For some reason, the firewall package won't work at all without
kmod-ipt-nathelper.

Better configure these properly.

location is object with latitude and longitude
added:
* firmware
* autoupdater status
* hardware model
* primary mac address
* mesh IPv6 addresses

* Merge gluon-alfred-ffmap into gluon-alfred
* Use gluon-crond instead of alfred's "facter" mechanism based on the broken busybox crond

Makes manifest.sample use the model instead of the board name as that is
what the script actually expects. Also, a sample signature is added.

Recently the autoupdater contained a case statement to distinguish
between TP-Link WDR3600 and TP-Link WDR4300. This was left over from
previous development versions of autoupdater that relied on the board
name instead of the model. It is thus no longer needed and be removed
safely.

Now that haveged starts before the config mode, there is no need to explicity
depend on it; instead it is just used when specified in the site configuration.

Disabling forwarding prevents the node from reacting to the Subnet-Router
anycast address.