Add documentation for building an encrypted OS package with "age"

Add documentation of the extra steps needed for building an encrypted OS package and descriptor with "age".

This is a follow up to MR Decrypt ospkg which introduced decryption of the downloaded OS package, and this change was discussed here: !241 (comment 22055).