Set firewall to behind WashU VPN

[johnmaruska]

• restrict firewall rules on Cromwell compute VM to only allow from the WashU VPN
• give firewall resource a more applicable name
• use a more applicable network tag