Set secret names on OIDCProvider status field

We believe this API is more forwards compatible with future secrets management
use cases. The implementation is a cry for help, but I was trying to follow the
previously established pattern of encapsulating the secret generation
functionality to a single group of packages.

This commit makes a breaking change to the current OIDCProvider API, but that
OIDCProvider API was added after the latest release, so it is technically still
in development until we release, and therefore we can continue to thrash on it.

I also took this opportunity to make some things private that didn't need to be
public.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>

test/integration/supervisor_secrets_test.go

@@ -45,28 +45,28 @@ func TestSupervisorSecrets(t *testing.T) {
 		{
 			name: "jwks",
 			secretName: func(op *configv1alpha1.OIDCProvider) string {
-				return op.Status.JWKSSecret.Name
+				return op.Status.Secrets.JWKS.Name
 			},
 			ensureValid: ensureValidJWKS,
 		},
 		{
 			name: "hmac signing secret",
 			secretName: func(op *configv1alpha1.OIDCProvider) string {
-				return "pinniped-oidc-provider-hmac-key-" + string(op.UID)
+				return op.Status.Secrets.TokenSigningKey.Name
 			},
 			ensureValid: ensureValidSymmetricKey,
 		},
 		{
 			name: "state signature secret",
 			secretName: func(op *configv1alpha1.OIDCProvider) string {
-				return "pinniped-oidc-provider-upstream-state-signature-key-" + string(op.UID)
+				return op.Status.Secrets.StateSigningKey.Name
 			},
 			ensureValid: ensureValidSymmetricKey,
 		},
 		{
 			name: "state encryption secret",
 			secretName: func(op *configv1alpha1.OIDCProvider) string {
-				return "pinniped-oidc-provider-upstream-state-encryption-key-" + string(op.UID)
+				return op.Status.Secrets.StateEncryptionKey.Name
 			},
 			ensureValid: ensureValidSymmetricKey,
 		},