[client-backup] implement function to encrypt backup

Summary:
Implementing backup encryption with AES-256 in GCM mode.

Depends on D8998

Test Plan: Tested with next diff.

Reviewers: michal, marcin, bartek

Reviewed By: marcin, bartek

Subscribers: ashoat, tomek

Differential Revision: https://phab.comm.dev/D8999