Flatten service-role config defaults (config[key].default) before
merging a customer's VM override, matching toolkit v1.6.0's nested
defaults.yml/iaas_ansible_roles.config shape.