Add documentation for pulling encrypted SSM parameters

[sethatron]

When using SSM parameter substitution, it's necessary to append ~true to the end of the declaration otherwise it pulls the encrypted value, which leads to failed deploys. There is currently no documentation to specify this.