Add support of storing secrets in Lockbox

[nikolaymatrosov]

• create secrets via serverless CLI describing them as resources
• reference secrets from Lockbox via syntax similar to https://www.serverless.com/framework/docs/providers/aws/guide/variables#reference-variables-using-aws-secrets-manager