osg-hosted-ce: merge stable, close port 80 if we don't need it for Let's Encrypt (incubator)

[matyasselmeci]

• Merge changes from stable/osg-hosted-ce again
• Modify the deployment and service templates such that we only open port 80 if the values don't specify a host cert or certkey

[brianhlin]

LGTM