Document how the Baserock runners for GitLab CI are set up

The config files continue to live only on the server (I think they contain secrets so I don't want to just commit them here) but we can at least document the basics.