Feature: tools: use OCF 1.1 role names in crm_resource --ban constraints

... unless built with --enable-compat-2.0 (which is a heuristic, and may not be
correct in rolling upgrades if run from a node with a newer version)