enhance parameter encryption to support per-namespace keys

PR #4756 adds a global encryption key to secure parameters attached to actions and packages. The key is provided at deployment time. As a subsequent enhancement, extend the encryption to include per-namespace configurations. Additionally, parameters should be encrypted relative to their package or action names so that they are not reusable across actions even in the same namespace.