* Add digest-safe k3s update-center assets * Harden k3s update-center assets * Trim k3s env secret names safely