add new external secret for vouch-values.yaml

[punkle]

THis will allow us to provide the client id and secret key for oidc outside of the deployment.

[martina-if]

Should we close this since it was implemented in the automation repo instead?