provisioners/chef: set `encrypted_data_bag_secret` only if it's uploaded

/cc @shanegibbs

Fixes #2984