Allow VMAlert CRD to store s3 credentials in kubernetes secret

[tiny-pangolin]

I would like the ability to store the access key and key_id as a kubernetes secret similar to how it is done in backup manager. It would nice if CustomS3Enpoint was also added so specifying a custom is consistent across CRDs