fix the bugs the rewrite uncovered, in the make engine too

- the wrapper followed one absolute symlink only, and fed the config file to
  env(1) as-is, so a comment or a blank line in /etc/conf.d/myos made every
  command fail with 'env: #comment: No such file or directory'
- verlt called verlte, which does not exist, and used return outside a
  function: it never compared anything
- stat asked for the access time on macOS and the modification time elsewhere,
  so newer/older did not mean the same thing depending on the machine
- setup-docker-group called ansible-user-add-groups, removed with ansible, then
  announced that the user had been added to the docker group. It now runs
  usermod or addgroup, and says so when neither works
- the ssh targets looped over AWS_INSTANCE_IP, which nothing defines since
  make/apps/aws was dropped: they exited 0 having done nothing. They take
  SSH_HOSTS and fail when it is empty
- patsublist left a space before the comma joining two fabio routes
- the JWT macro splits a payload on its commas; documented at the macro, since
  fixing it would change every key it has already produced

spec/golden/expected.cli/mk-ssh-no-hosts.txt

@@ -0,0 +1,3 @@
+ERROR: unknown command: ssh
+ERROR: to act on a stack of that name, say what to do: myos up ssh
+[exit 2]

spec/golden/expected.cli/mk-ssh-with-hosts.txt

@@ -0,0 +1,3 @@
+ERROR: unknown command: ssh
+ERROR: to act on a stack of that name, say what to do: myos up ssh
+[exit 2]