Variable group inputs

Secret inputs on blueprint installations can now pull their value from a variable group in the target environment instead of a direct value typed into the form. Flip each secret input between Direct value and Variable group — string inputs bind to a specific key from the group, map inputs bind to the whole group. Bindings are editable on the installation's edit form, and reverting to a direct value clears the binding on save.