encryption: Add oob migration for external service configuration
Created by: asdine
This PR adds a background job that encrypts external service configuration at startup. It uses the new out of band migration package https://github.com/sourcegraph/sourcegraph/blob/main/doc/dev/background-information/oobmigrations.md