[Cherry-pick][3.3] fix: use secretKeyRef for VLLM tokens to prevent credential leaks in logs

[Cherry-pick][3.3] fix: use secretKeyRef for VLLM tokens to prevent credential leaks in logs #4293