Add note about using .pgpass for password security

As per https://github.com/mapbox/tilemill/issues/2301#issuecomment-42229763 .

I don't know exactly how the TileMill documentation is generated from markdown, so I may not have it quite right. In particular, I don't know what the `markdown='1'` flag does - so please verify.