Update sops to 3.10.* for age plugin support

[haslersn]

Please update the sops dependency to 3.10.* which adds age plugin support. This is required, e.g., to use an age-plugin-yubikey identity to encrypt secrets.

As a workaround, we currently use the following patch on top of v4.3.3: ksops-patch.txt