Pull server and load balancer config into a submodule

[onetwopunch]

For users that have more strict separation of duties or those that use Shared VPC, creating a network and firewall rules will not work. Instead of having many switches for what resources to enable or disable, we should have a seperate submodule specifically for the LB and Vault servers so networking teams can add the other pieces ahead of time and potentially in other projects.