Migrate tf from bw password to bw secret manager (#3058)

* feat: migrate to BW Secret Manager

* feat: refactor modules to reduce spread

* fix: update values

* feat: update creds for cpgo

Author: joryirving

kubernetes/utility/apps/flux-system/tofu-controller/app/secret.sops.yaml

@@ -4,11 +4,7 @@ kind: Secret
 metadata:
     name: terraform-minio-secret
 stringData:
-    bw_password: ENC[AES256_GCM,data:NZo62l+oMHLh,iv:+uz2gVtg3tdLtSDOUeUvbeX+Q6cubh3KydZ/aHq+zAw=,tag:Py7PzdP4w8CMU2vFcNCZkQ==,type:str]
-    bw_client_id: ENC[AES256_GCM,data:VpoecxZXUysK5ocT0peiWp/HUyce5iVLx/UDGFhxN+k9xPJWgOWRd9M=,iv:tubgCeElJRK7KsDpEhdGGtxzjf9+CHyHC2SqW6ajWSw=,tag:rKsIvMj9Rg+SPFmgOkqXTA==,type:str]
-    bw_client_secret: ENC[AES256_GCM,data:JUlgJL6nDdOCrF2l1spBj4n3eAguizCB9yhSTaBg,iv:bYLojhl/Or6lBFs0aPdfhkIPc4Lnr5eDLxoBQLRULaA=,tag:cYrK5Nxq6ZoiCKPuaLSFww==,type:str]
-    bw_email: ENC[AES256_GCM,data:vl3aRwsTs6e6icvXIFseptniDxVpiBY=,iv:X9pdGWrQqlXNsZF73Ti84HyhaBTzG+OFRtKD21TFZ0g=,tag:Zv+spTkN4u5aB2aB1mqJnw==,type:str]
-    minio_url: ENC[AES256_GCM,data:Cz/GB8HQtxz444g=,iv:ok0B4L5KfqJop/yyGCg6Z8/Yi3R13+TGgp4Q/5d+EdU=,tag:dlymg0q55lPZ/3mEY8HiGg==,type:str]
+    bw_access_token: ENC[AES256_GCM,data:4J7q7em3vzRXUD9qSEgEH2SUKhpu/43eJTs+fHrW0jtQeFYdm8cDMweUzU0b4NMBKdxKlm5kyEDAGhl8IujXzmEpAH9XxTFl9WlREi6cBqW5tJhXwK4180WXET/irA==,iv:rvaA3HOtCiD1XtJ1bwrcQIJwtwBDNx9ZNqOH22S70vU=,tag:KRV6VOvwW9MQ2uKMcuwrdw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -24,8 +20,8 @@ sops:
             KzRDbWFsVEpsalByQ1pKL2VsbHZuaTQKKQ+Ia4b12/kVhKvypUlf/riQuTQFh9zy
             T/Lp0g6o1eW7KoE+tFk9QgPGYLphyXn/iVNWpz+bMTXhcgFL0qTQZA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-10-01T14:46:56Z"
-    mac: ENC[AES256_GCM,data:rkRTX0QVoAqdIXzUtNHRQpOOAfDEWitxQkllv+//wbtys9iVerIlpZ5ovVaYfaJs/1aiZvn6JtA1DoW/opcQwvZZ6joyLvy1oMyhKZAVD/vW5zCW85OxTbKRzuoz7jUKTx82Go/GJMt3JMNaNkCyPeqqtWF4eRllg+yxuYA98t8=,iv:EmfRGoJ5uVyAjnLu4lvKd0MAadIeeZyZbG1v5ttCNSw=,tag:i3EYeUUPHOIiRY2XBm1I6A==,type:str]
+    lastmodified: "2024-10-09T19:31:49Z"
+    mac: ENC[AES256_GCM,data:mMm1kqKMYLe31Zn8V8BUPKJqAzcBBVVWTCS2IjrLPux/IEtS2mzscg/rVT2cKRZJu3pLW5nyWwU/ybf8vaG2EeaDnH70bNkFdv6u2iD3+gypFqovexnFIavxxYZKK56jH4/QWXBCo6LSc/0fVFw/bROmHlKgkfPVAU41O36516o=,iv:F4N+wHwb+kipzGxeIYHg7y+ImzI4RYpOCj/qamo4IG4=,tag:gv5P6kGOKOJTERMhkigYYw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.0