Pass heat domain admin password to keystone

This is needed to create the user/domain/project in the
keystone profile on whatever role is running the keystone service.

Change-Id: I115ead005974080e0a35e3675d9b37828c8934b1
Closes-Bug: #1631130
Depends-On: Ib088a572b384b479f51d56555734d78ab840a1f3
(cherry picked from commit 4e98b29572)

puppet/services/heat-engine.yaml

@@ -103,3 +103,6 @@ outputs:
           heat::db::mysql::allowed_hosts:
             - '%'
             - "%{hiera('mysql_bind_host')}"
+        keystone:
+            # This is needed because the keystone profile handles creating the domain
+            heat::keystone::domain::domain_password: {get_param: HeatStackDomainAdminPassword}