Add encrypted hieradata to local puppet runs

[bryantrobbins]

Because the "standard-aws" repo is separate, it would be nice to be able to supply project-specific details to that standard setup during launch, so that the configured server(s) can have project-specific details.

[bryantrobbins]

This is more of a feature of the standard-aws project than baseball. Right now, standard-aws is hard-coded to use the baseball repo and its subdir for configuration of the seed project. It also uses a hard-coded password for the Jenkins admin.