Merge pull request 'nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180)' (#201) from feat/nodered-says-how-its-secrets-are-taken into main

modules/nodered/module.json

@@ -5,8 +5,14 @@
     "flows.deployed"
   ],
   "own-secrets": {
-    "admin": "${dir:mesh-state}/admin",
+    "admin": {
-    "api-token": "${dir:mesh-state}/api-token",
+      "path": "${dir:mesh-state}/admin",
+      "taken": "at-start"
+    },
+    "api-token": {
+      "path": "${dir:mesh-state}/api-token",
+      "taken": "at-start"
+    },
     "broker": "${dir:mesh-state}/broker"
   },
   "capabilities": [