feat(clickhouse): enable encryption

[MoisesGSalas]

This adds extra options to configure the clickhouse server with disk encryption and TLS support.

1. To enable encryption you must set CLICKHOUSE_ENABLE_ENCRYPTION=true and provide a CLICKHOUSE_ENCRYPTION_KEY with at least 16 bytes (depending on the algorithm used).
2. The playbook will copy the certificate and key located at CLICKHOUSE_CERTIFICATES_SOURCE_DIR (by default /tmp/clickhouse-certificates/ in the provisioning machine (the one running the playbook) to the target machine. The certificate and key must be named tls.crt and tls.key respectively.
3. It's possible to define volume and mount configuration for the pod that runs each playbook independently. The idea is to mount k8s secret that holds the tls.crt and tls.key files.

Some additional configuration files were relocated.

Backup configuration was added.