Split OIDC Clients in portal properly

[dxlbnl]

Expected Behavior

There should be multiple oauth clients for connecting to the portal and kubernetes, now nerd and k8s use the same set of credentials. Different clients should use different client_id's public clients like the nerd should only have to use the client_id and not secret

Actual Behavior

Now it's using the k8s secret to authenticate properly.