Move generation of service credentials to a single role

Since Ansible doesn't really have first-class modules, parametrizing dependencies is a problem. By leveraging services.yml we can instead generate all service credentials at once within a single role, simplifying the dependency structure, and solving the problem of credentials for docker-based roles.