Also clarify docs that encrypted config must be contained in renovate.json (i.e. not package.json).