Added ops files for encryption

[hribo98]

The current encryption.yml supports only enabling concourse encryption.

We will support all scenarios by adding those two files:

• rotate-encryption-keys.yml - Rotating encryption key
• turn-off-encryption.yml - Disabling encryption

[vito]

Thanks!