Allow child environments to remove modules.

The case which prompted this change:
parent contains hugonikanor-letsencrypt, child instead wants the
(unrelated) module puppetlabs-letsencrypt. Since these collide
hugonikanor-letsencrypt must be removed before the new one can be added.

Removal of modules only works on explicitly noted, and those modules
might still be pulled in as dependencies.