Optional Encryption for Secret Files

[denisakp]

Implement optional encryption for secrets files. Sentinel should be able to decrypt these files at runtime using a user-provided decryption key or passphrase, ensuring data is secure even if the file is compromised.

Acceptance Criteria:

Sentinel can decrypt encrypted secrets files for

• MongoDB,
• MySQL
• PostgreSQL connections,

with clear error handling if decryption fails or the key is incorrect.