[terraform-ibm-icd-redis] Cleanup of KMS related config

[ocofaigh]

• Add support to create backup KMS s2s auth policy in the module
• Scope the auth policy to the exact key ([terraform-ibm-icd-redis] Scope KMS policy to the exact KMS key #447)
• add support for use_ibm_owned_encryption_key (Add support for use_ibm_owned_encryption_key to Redis DA #470)
• The DA itself will also need these auth policies in order to support KMS instance that is in another account
• Stop asking for KMS GUID in the module, and instead parse from Key CRN

Considerations:

• root level module
• fscloud submodule
• DA
• CODE COMMENTS

[ocofaigh]

See terraform-ibm-modules/terraform-ibm-icd-elasticsearch#363 for reference on how this should be rolled out

[ocofaigh]

#494