FIX(test): move SealedSecret to overlays

- Remove sealed-argocd-token.yaml from base
- Add overlays/dev/sealed-argocd-token.yaml (namespace: portfolio-dev)
- Add overlays/prod/sealed-argocd-token.yaml (namespace: portfolio)
- Add SealedSecret references to each overlay kustomization.yaml
- SealedSecret includes namespace during encryption, needs per-env management

deploy/k8s/overlays/prod/kustomization.yaml

@@ -6,6 +6,7 @@ namespace: portfolio
 resources:
   - ../../base
   - resourcequota.yaml
+  - sealed-argocd-token.yaml
 
 commonLabels:
   environment: production

deploy/k8s/overlays/prod/sealed-argocd-token.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: argocd-token
+  namespace: portfolio
+spec:
+  encryptedData:
+    token: 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
+  template:
+    metadata:
+      name: argocd-token
+      namespace: portfolio
+    type: Opaque