Draft: Add role for lego ACME client

Our current ACME client, acmebot, is not packaged in Debian and currently broken (see !48 (closed)). There are surprisingly few ACME clients in Debian, lego is one of them.

Unfortunately, it does not have a nice config file, but operates mostly using CLI arguments. These can be abstracted away in systemd units and a little templating magic.