Load TLS secrets at converge time

Previously the Consul secrets were loaded at compile time, which meant all the dependencies for gitlab_secrets needed to be installed at compile time. To avoid this we should defer the loading of the secrets until converge time.