Root encrypted data to kms encryption

[akhilmhdh]

Description 📣

This PR adds migration to remove all directly root encrypted schemas with our new kms architecture. This also allows migrations to use kms features.

All the unused fields are kept nullable and not dropped. Will be doing a rolling migration for this to remove it later.

Type ✨

• Bug fix
• New feature
• Improvement
• Breaking change
• Documentation

Tests 🛠️

# Here's some code block to paste some code snippets

---

• I have read the contributing guide, agreed and acknowledged the code of conduct. 📝

[gitguardian]

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
While these secrets were previously flagged, we no longer have a reference to the
specific commits where they were detected. Once a secret has been leaked into a git
repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.

---

^{_{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}}

[maidul98]

Left some small comments. For manual testing i tried with:

• ladap config [good]
• dynamic secret with pg [seems to save and all but says the password is wrong?]
• secret rotation [seems to save and all but says the password is wrong?]
• webhooks [good]

Also what about integrations and are there any other items we are missing on this pass? What about the server admin slack secrets?

[maidul98]

The old way of running the migrations should still work. If no migrations are needed, then it should just skip. If it needs some environment varables, then we should throw the error telling them.

You can try this behavior by uisng our old .dev.yaml docker compose file.

Also got this at some point when i tried to boot up:

[sheensantoscapadngan]

admins should be able to migrate down without defining the new envs

[maidul98]

lgtm