fix: use secretKeyRef for VLLM tokens to prevent credential leaks in logs

fix: use secretKeyRef for VLLM tokens to prevent credential leaks in logs #2018