Clean up configuration of tun-udp-p2mp-hash-defscript so we can more easily manage the FPs

[flichtenheld]

Currently we need to edit a file that is committed to git. Move to a separate file

While at it consider switching from writing the FPs with openssl on the machine to writing them with terraform. We should have the FP available from the cert resource.