Use dedicated encrypted runners so I2S tests cover the actual flash encryption data path. This replaces coverage that only observed the virtual eFuse software state. Co-authored-by: Cursor <cursoragent@cursor.com>