cdn-logs: ensure adm group is applied to fastly logs

[ewdurbin]

The adm group is used to control access to reading streamed logs, but isn't available for salt to fulfill the requisite.