Change client secret lookup behaviour to not lookup from the runtime cluster

[aaronschweig]

Currently we look up the client secret for our authentication code flow from the runtime cluster.

With the changes in the security-operator we need to change this behaviour and look it up from KCP where the IDP controller writes the client secret to