Add secretsBackend option (e.g. 1Password)

[khalilgharbaoui]

Requesting a pluggable secrets backend so secrets can be pulled from providers like 1Password instead of local files. This helps teams keep secrets centralized while still syncing configs across machines.