Secrets: Refactor data_key_id out of the encoded secure value payload (#111852)

* everything compiles

* tests pass

* remove file included by accident

* add entry to gitignore

* some scaffolding for the migration executor

* remove file

* implement and test the migration

* use xkube.Namespace in our interfaces

* add todo

* update wire deps

* add some logs

* fix wire dependency ordering

* create tests to validate error conditions during migrations

pkg/storage/secret/encryption/data/encrypted_value_update.sql

@@ -2,6 +2,7 @@ UPDATE
   {{ .Ident "secret_encrypted_value" }}
 SET
   {{ .Ident "encrypted_data" }} = {{ .Arg .EncryptedData }},
+  {{ .Ident "data_key_id" }} = {{ .Arg .DataKeyID }},
   {{ .Ident "updated" }} = {{ .Arg .Updated }}
 WHERE 
   {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND