secretRef in configPatches

[Preisschild]

Some talosconfig values (such as API tokens for cloud vip, wireguard privatekeys, registry credentials, ...) should not be be written directly into the patches as this would require treating the whole resource as a secret.

I think instead there should be the possibility to reference some values from kubernetes secrets.