Now that 1Password Operator is configured, convert any secrets (other than the ones needed for 1Password) to 1Password secrets. Either using deployment annotations (see https://github.com/bkonicek/gitops/blob/main/ops/pihole/patches/1password-secret-annotation.yaml), or explicitly declared via OnePasswordItem CRs.