(SERVER-103) External CA documentation

This commit includes a new document which covers the use of an external
CA with Puppet Server.  This commit also adds a link to the new document
from a couple of existing documents.
I'm referencing the "X-Client headers" doc here which doesn't exist yet, so this shouldn't be merged until we decide what the name of this doc is and where it lives so that this reference can be fixed up.