Replace firewall rules with Calico

I had started a tool to do this: https://github.com/remram44/calico-auto-policy

However it looks like Calico is implementing support for the new admin policies from the SIG Network. We should probably wait and use that instead.