Document how sensitive variable passwords reach Calamari

[zentron]

Background

The data encryption page explains encryption at rest on the Octopus Server. It doesn't say what happens to sensitive variables on a deployment target.

Results

Adds a short section to the Data encryption page. The section says that:

• Sensitive variables are sent to the target encrypted and stored encrypted.
• The password that decrypts them is passed to the Calamari invocation as a process parameter.

Testing

Docs change only. I didn't build the site.

🤖 Generated with Claude Code

[team-marketing-branch-protections]

Pull request environment is available at https://stoctodocspr3498.z22.web.core.windows.net/.

You can view the ephemeral environment status in Octopus Deploy.

This environment will be automatically deprovisioned when the pull request is closed, or after 7 days of inactivity.