Enforce non-destructive update policy by default, requiring override

It's a little too easy to accidentally replace or destroy a resource
unintentionally, simply by changing a parameter of an existing stack.
This change ensures that you're at least aware of the risks before
moving forward with a potentially risky update.

Signed-off-by: Evan Owen <kainosnoema@gmail.com>