Implement `encrypt` command

[vst]

• SOPS configuration will be added under top-level sops property in the specification.
• Run sops as a subprocess.
• Optionally, dump clear secrets into an additional file.