[backport-1.6]: [trident] secret to be injected via kustomization_substitute_secrets

A solution for issue #3254 (closed) needs to be backported to 1.6.x