Transparent encryption and decryption for all tables that contain secrets or tokens

Created by: unknwon

Encrypts and decrypts secrets columns in our database transparently.

Notes:

• event_logs.argument is left out, see discussions in Slack.
• repo.metadata is not encrypted because we normalized most of its value and decided not worth encrypting.

Co-authored-by: Dax McDonald [email protected]