bump spiff
add exemplary aws vpc manifest

...and a nifty way to know if the official concourse deployment strays
from it

[#78772526]