ansible-vault edit: replicate sudoedit behavior

- do not touch original file if temporary file is not changed,
  but rekey original file if it uses obsolete scheme
- create new encrypted file if it does not exist
- see also #7041 and #7042