encryption: Lazily decrypt `user_external_accounts`

Created by: efritz

Stacked on #40282. This PR wraps the user_external_accounts.auth_data and user_external_accounts.account_data fields in an encryptable struct.

Test plan

main-dry-run: https://buildkite.com/sourcegraph/sourcegraph/builds/166839