Document minimum privileges for CDK deployment

Should probably go here: https://docs.aws.amazon.com/en_us/cdk/latest/guide/security-iam.html

Currently this SO question is one of the best sources of this information, which is a little embarrassing

https://stackoverflow.com/questions/57118082/what-iam-permissions-are-needed-to-use-cdk-deploy