Use K8s Secrets instead of ConfigMap for gitlab managed apps

Currently we pass secrets through to the applications using ConfigMap.

We should be using Secret as this improves the security of these credentials and reduces risk of them leaking.