[force] Use latest secret version when reading dns secret

Signed-off-by: Nicu Reut <nicu.reut@digitalasset.com>

Author: nicu-da

cluster/expected/infra/expected.json

@@ -616,7 +616,7 @@
   },
   {
     "custom": true,
-    "id": "projects/da-cn-devnet/secrets/dns01-sa-key-secret/versions/1",
+    "id": "projects/da-cn-devnet/secrets/dns01-sa-key-secret/versions/latest",
     "inputs": {},
     "name": "dns01-sa-key-secret",
     "provider": "",

cluster/pulumi/infra/src/network.ts

@@ -180,7 +180,7 @@ function clusterCertificate(
 
   gcp.secretmanager.SecretVersion.get(
     'dns01-sa-key-secret',
-    `projects/${GCP_PROJECT}/secrets/${gcpSecretName}/versions/1`
+    `projects/${GCP_PROJECT}/secrets/${gcpSecretName}/versions/latest`
   ).secretData.apply(dns01SaKeySecret => {
     new k8s.core.v1.Secret(
       'clouddns-dns01-solver-svc-acct',