sap_ha_pacemaker_cluster: Add firewall steps

[marcelmamula]

Todo

When sap_swpm and sap_hana_install roles are adjusted to use firewall LSR role by @berndfinger , we @ja9fuchs need to add steps to HA role to add cluster specific ports for HA.

Example:

firewall-cmd --permanent --add-port=5404-5405/udp

This will resolve issue:

Node List:
  * Node h02hana1: UNCLEAN (offline)
  * Online: [ h02hana0 ]

Node List:
  * Node h02hana0: UNCLEAN (offline)
  * Online: [ h02hana1 ]

[marcelmamula]

LSR Role already have firewall task so we need to review if it is working for us.
https://github.com/linux-system-roles/ha_cluster/blob/main/tasks/firewall.yml