give Icinga access to @ZhouZ and @Slaporte
See the parent task for the reasoning. They should be able to check the "legal footer" icinga service checks.
Additionally, make them contacts for that service so they get notified via email when it turns CRITical.
- contacts for each of them defined in the private puppet repo which match the "uid" of the existing wikitech user
- add those users to the "wmf" LDAP group
- a contactgroup with the contacts as members, defined in the public puppet repo
- add the contactgroup to the service checks