add pwgen package, required by encfschkey, to deployment::creds

This package is required by encfschkey though not by encfsmount.

cc @nickstenning and @annashipman -- as you're both currently installing this package via a package resource, it might break boxen for you?