feat: use vals for secret decryption

[rajiteh]

Refers to #2407

Introduces the ability for the fleet.yaml to specify vals secret strings, which then will be decrypted at bundle processing time by the fleet operator.

Fleet operator deployment is responsible for configuring the appropriate environment variables for vals to decrypt secrets using the correct backend.

See #2407 for more context.