feat(k3s): enable encryption at rest and stargz snapshotter

bootstrap/templates/ansible/inventory/group_vars/master/main.yaml.j2

@@ -24,6 +24,8 @@ k3s_server:
   disable-network-policy: true
   disable-cloud-controller: true
   disable-kube-proxy: true            # Cilium uses eBPF
+  secrets-encryption: true
+  snapshotter: stargz
   write-kubeconfig-mode: "644"
 {% if bootstrap_ipv6_enabled | default(false) %}
   cluster-cidr: "{% raw %}{{ cluster_cidr }},{{ cluster_cidr_v6 }}{% endraw %}"