Aspire: Add read-only secret repository for ACA

[brettsam]

We currently have a read/write K8S secret repository, but it won't work as expected in ACA where we don't have write access. So we need a repository that supports only reading from the mounted volume, and not updating/writing.