finish ats setup

[balmas]

remaining to do

• initial run of db setup, creating and data ingest scripts
• figure out why the venv install falls in puppet but succeeds on the command line
• setup production config (secret, db)
• db and db directory need to be writeable by www-data (or user of gunicorn service)