Issue disk encryption command to MDM-enrolled hosts

[lukeheath]

• Premium users only

• [ ] Build a profile template based on the instructions in https://github.com/fleetdm/fleet/issues/8708 to enable FileVault + escrow using SCEP certificates

• [ ] If FileVault turned on for a team (or "no team"), ensure there's an entry for a profile with the FileVault config in mdm_apple_configuration_profiles

• [ ] If FileVault is turned off for a team (or "no team"), ensure we remove the entry with the related profile from mdm_apple_configuration_profiles

For details on process reference: https://github.com/fleetdm/fleet/issues/8708

[lukeheath]

@roperzh I'm assigning this issue to you to fill out the specs so it's ready for development in the next sprint. Please bring over any relevant details from the issue linked in the description. Thanks!

[fleet-release]

Secure data in clouds of glass,
Protection from prying eyes,
Fleet's encryption answers the call.

[fleet-release]

Secure peace of mind
Disk encryption needed
For peace in the clouds