Sync asm secrets with db resolver references

[safeer]

Currently, nuking / recreating the db removes all references to asm secrets, which means all secrets need to be set again. Client team has had to do this a few times.

Since we're tagging all asm secrets with "ftl", we can fetch them and add their refs to the db. Perhaps at first load / if we have zero refs?

[deniseli]

That's a great idea

[safeer]

Alternative: introduce a command to attach an existing asm secret to a db ref, to allow client teams to bring in refs more intentionally. i.e. from @bradleydwyer:

ftl secret attach <ref> --asm --asm-ref=[asm id]

[jonathanj-square]

The team does not think there is work to be done here if we incrementally update the db instead of performing wipes.