Allow using secret references in features.yaml files

[kuhnroyal]

I wonder if the new secrets integration could be used to reference secrets inside features.yaml configuration files.
This would be great to roll-out/refresh API keys on clients with a variant flag or inside the metadata.