SecretsManager: Adding ability to disable all DEKs (#108444)

* Adding dek deactivation and rename list dek

* disable data keys from manager

* separate interface and don't use in encryption manager

pkg/storage/secret/encryption/data/data_key_disable_all.sql

@@ -0,0 +1,7 @@
+UPDATE
+  {{ .Ident "secret_data_key" }}
+SET
+  {{ .Ident "active" }} = false,
+  {{ .Ident "updated" }} = {{ .Arg .Updated }}
+WHERE {{ .Ident "active" }} = true
+;