Integrate vault-plugin-auth-templated-aws with tarmak

[kragniz]

/kind feature

In #120, we investigated methods of creating dynamic policies for each tarmak instance, the outcome of which was vault-plugin-auth-templated-aws.

If we decide the extra complexity is worth it, this should be integrated with tarmak and enabled by default.