Fixes #2414 - Move puppet report processing code to the report processor

This creates a API route for POST:/api/reports which matches the GET
format for reports. Tests are updated, with the report model tests
moving to the puppet-foreman module (along with the report fixtures).

fixes #2863 - restrict APIs to resources that a user is permitted to manage (CVE-2013-4182)

Refs #2414 - Remove Puppet from facts API and Settings

Reports are still in progress and will come in a later PR
DB schema is updated to not need puppet/rails

fixes #2988 - merge authentication code, enables REMOTE_USER auth on new API controllers

fixes #2933 - add missing fields to installation media API

fixes #2869 - refactor method find_nested_obj into API::BaseController

fixes #2838 - taxonomies controller - fix in params and finder

fixes #2757 - show model validation errors in production.log

Fixes #2817 - wrong param types in lookup keys API documentation

fixes #2411 - move files in /models to /concerns, /services, /mailers, /observers