Wrap tofu or terraform command to manage encrypted state

Summary:
This tf wrapper will detect if tofu or terraform is needed,
and will take care to mount PEFS volume containing the encrypted
state and working .terraform directory for the current config.

Ref T2359

Test Plan: Deploy D4206

Maniphest Tasks: T2359

Differential Revision: https://devcentral.nasqueron.org/D4207