Update config files to set permissions correctly for Greengrass OTA

[timmattison]

Greengrass OTA requires some additional permissions and (optionally) an additional role to sign artifacts. This needs to be rolled into the default deployment configuration so that users can use it out of the box.

Also, some example docs should be added to explain how it can be used.