feat(helm): add existingSecret support for external secret references