The Puppetfile should not be executable code

[binford2k]

Right now the Puppetfile is arbitrary executed Ruby code. This can be dangerous, especially since some OSP users configure r10k to run as root. We should use parser or Ripper to parse the Puppetfile instead of just running it through instance_eval().

See #885 for a first attempt at this (using the AST directly).

[github-actions]

This issue has been marked stale because it has had no activity for 60 days. The Puppet Team is actively prioritizing existing bugs and new features, if this issue is still important to you please comment and we will add this to our backlog to complete. Otherwise, it will be closed in 7 days.