hetzner-k3s bridge

Secrets read from Vault (http://127.0.0.1:8200). This bridge has no seal: Vault is its seal.