stacks: add .env + .env.secrets.ctmpl for identity-and-security stacks

Adds the real Vault Agent secret-rendering templates and non-secret
env vars for authentik, vaultwarden, and wazuh - sanitized (real
domain/email/SMTP provider genericized, kv/<host>/... paths use a
generic 'host' placeholder instead of the real hostname). This is
the standing pattern for the rest of stacks/ going forward.

stacks/identity-and-security/vaultwarden/.env

@@ -0,0 +1,12 @@
+# Exposed HTTP port
+HTTP_PORT=8080
+
+# System time zone
+TZ=Etc/UTC
+
+# ID's
+PUID=1000
+PGID=1000
+
+# Volume Home
+DOCKER=/path/to/docker_volumes

stacks/identity-and-security/vaultwarden/.env.secrets.ctmpl

@@ -0,0 +1 @@
+ADMIN_TOKEN={{ with secret "kv/host/vaultwarden" }}{{ .Data.data.admin_token | replaceAll "$" "$$" }}{{ end }}