Migrate Homepage to OnePassword CRDs

[SRF-Audio]

Key tasks:

Create OnePassword CRDs for NextDNS API token and Proxmox API password
Decide on ArgoCD token approach (static token in 1Password, keep Ansible role, or native ArgoCD token management)
Update argocd/apps/platform/homepage.yml to use secret references
Test widgets