FEAT: encryption extension integration with kafka

[chenqi0805]

Description

This PR integrates the encryption plugin with the kafka buffer by

• introduce encryption_id which references the encryption config ID in the extension config under topic configuration
• introduce BufferMessageEncryptionDeserializer and BufferMessageEncryptionSerializer as a wrapper around inner dataSerializer with encryption engine.
• avoids clash with existing kms config under kafka topic by adding mutual exclusive validation check between encryption_key and encryption_id.

Manually tested with

version: "2"
extension:
  encryption:
    default:
      kms:
        encryption_key_directory: s3://my-encryption-1/key
        key_id: 0f1e4812-b5a3-454a-afc6-fbce9a251263
        encryption_context:
          aws:osis:arn: "arn:aws:osis:us-west-2:253613578708:pipeline/test-persistent-buffer-1"
        region: us-east-1
      #  #sts_role_arn: arn:aws:iam::253613578708:role/FullAccess
waf-access-log-pipeline:
  source:
    http:
      path: "/${pipelineName}/logs"
      ssl: false
      port: 21890
  buffer:
    kafka:
      bootstrap_servers:
        - "localhost:9092"
      encryption:
        type: none
      topics:
        - group_id: "BufferGroup-sbw44hdc2cqybr6ghmbkrdwzue"
          name: "BufferTopic-sbw44hdc2cqybr6ghmbkrdwzue"
          encryption_id: default
          #create_topic: true
          #encryption_key: AQIDAHi4L/vFhsXe6BbZnQC2Y/2j9I9hZG3I4bTZi1rXOep0DQG7bFN0uQMPI/4XP0JOcnQPAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM/IflndDoqKPzeR5vAgEQgDsVdh4c7ghXJg30RdudEXk+e2CB5GAFNqPHwxyl+yLOe5lPWT3oXuKEirJ1AJ1J5yPYIc/qZ1pWfcilUw
          #kms:
          #  key_id: 0f1e4812-b5a3-454a-afc6-fbce9a251263
  sink:
    - stdout:

Note:
The kafka buffer integration test failure is on the existing kafka topic kms config unrelated to encryption extension. There is a separate effort to fix the integ test.

Issues Resolved

Resolves #[Issue number to be closed when this PR is merged]

Check List

• New functionality includes testing.
• New functionality has a documentation issue. Please link to it in this PR.
  • New functionality has javadoc added
• Commits are signed with a real name per the DCO

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.