Add SSH canonicalization to bastion role
    
    This allows connecting to short host names without appending
    "infra.opensuse.org".
    Without this, connecting to short host names would return
    "No host key is known for ..." since we enforce strict checking.
    
    Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>