encryption: Do not proactively fetch version
Created by: efritz
Alternative to #40117, (see also the slack context). This PR removes a proactive call of Version on decrypt, which easily doubles the number of KMS API calls we do on each decrypt.
Test plan
Existing unit tests.