Change client secret lookup behaviour to not lookup from the runtime cluster

Currently we look up the client secret for our authentication code flow from the runtime cluster.

With the changes in the security-operator we need to change this behaviour and look it up from KCP where the IDP controller writes the client secret to