Add frontend encryption

[lakshmimsft]

Description

This pull request encrypts sensitive fields in dynamic resource properties before they are saved to the database. The main changes add a filter that detects sensitive fields using resource schemas, encrypts them using a key from Kubernetes secrets. The changes also include comprehensive unit tests and necessary wiring in the service and route initialization.
ref: design doc
note: this pr depends on merge of pr #11098 for tests to run.

Type of change

• This pull request adds or changes features of Radius and has an approved issue (Frontend Encryption Updates #11092).

Fixes: #11092

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

• An overview of proposed schema changes is included in a linked GitHub issue.
  • Yes
  • Not applicable
• A design document PR is created in the design-notes repository, if new APIs are being introduced.
  • Yes
  • Not applicable
• The design document has been reviewed and approved by Radius maintainers/approvers.
  • Yes
  • Not applicable
• A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
  • Yes
  • Not applicable
• A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
  • Yes
  • Not applicable
• A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
  • Yes
  • Not applicable

[radius-functional-tests]

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	5bc654f
Unique ID	func79f0f7e303
Image tag	pr-func79f0f7e303

• gotestsum 1.13.0
• KinD: v0.29.0
• Dapr: 1.14.4
• Azure KeyVault CSI driver: 1.4.2
• Azure Workload identity webhook: 1.3.0
• Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func79f0f7e303
• Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
• applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func79f0f7e303
• dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func79f0f7e303
• controller test image location: ghcr.io/radius-project/dev/controller:pr-func79f0f7e303
• ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func79f0f7e303
• deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded