Embed policies for GitHubActionServiceRole and EncryptionLambdaRole.  Update EncryptionLambda source reference to one with better logging.
Embed policies for GitHubActionServiceRole and EncryptionLambdaRole.  Update EncryptionLambda source reference to one with better logging.

This change is because we've recently experienced deployments fail with "EncryptionLambdaRole is not authorized to perform: kms:Encrypt."  It looks like the policy document isn't propagating fast enough (ie: race condition).

Giftbit/sam-scaffold,Giftbit/sam-scaffold,Giftbit/sam-scaffold,Giftbit/sam-scaffold