gocryptfs-xray: integrate ctlsock path encryption/decryption

[rfjakob]

ctlsock-encrypt.bash works, but is hard to discover (#376, #412), not documented, and needs extra cli tools installed as dependencies.

Integrate into gocryptfs-xray to get rid of dependencies and document the functionality in the gocryptfs-xray man page.