chore(syncthing): attempt to inject sops-encrypted secrets into syncthing's config folder

apps/syncthing/overlay/media/secrets.yaml

@@ -0,0 +1,15 @@
+apiVersion: viaduct.ai/v1
+kind: ksops
+metadata:
+  name: ksops-generator
+  annotations:
+    config.kubernetes.io/function: |
+      exec:
+        path: ksops
+secretFrom:
+  - metadata:
+      name: sync-secret
+    type: Opaque
+    binaryFiles:
+      - cert.pem=./cert.sops.pem
+      - key.pem=./key.sops.pem