dev/sg: add 1pass secret provider, use 1pass for OkayHQ token

Created by: bobheadxi

It seems not everyone has access to gcloud, so we check both 1pass and gcloud for OkayHQ token. This also lays the groundwork for future components to also leverage 1password for shared credentials.

This also means that sg.config.yaml can use 1pass secrets now 😁

Closes https://github.com/sourcegraph/sourcegraph/issues/33846

Test plan