This change adds to the Salt state carp (roles/router/carp/init.sls) a secretsmith configuration file
on routers, allowing the script from T2276 to authenticate to Vault using AppRole.

The configuration file (/usr/local/etc/secrets/carp-secretsmith.yaml) contains:

• Vault server URL
• AppRole credentials (role_id and secret_id) retrieved from Vault

Ref T2276

• Applied state on router-002:
  
  salt 'router-002' state.apply roles/router test=True
  
  salt 'router-002' state.apply roles/router

• Applied state on router-003:
  
  salt 'router-003' state.apply roles/router test=True
  
  salt 'router-003' state.apply roles/router