Feat: add support for encrypt sensitive data with kusion cli

What would you like to be added?

The kusion workspace command line provides the ability to create or update sensitive data references based on the definition of secret provider in workspace.yaml

Why is this needed?

When I use secret manage ability of kusion. I found that I should have to store sensitive data with different product interface, and I have to understand different ref splicing rules of different secret store in order to write secret ref in config code. I hope that kusion workspace could provider ability to automatically store secret store in different secret provider platform and return correct ref of the sensitive data in secret store platform.