encryption: Do not proactively fetch version

Created by: efritz

Alternative to #40117, (see also the slack context). This PR removes a proactive call of Version on decrypt, which easily doubles the number of KMS API calls we do on each decrypt.

Test plan

Existing unit tests.