Use application credentials for k8s-capi-provider

Created by: garloff

See https://docs.openstack.org/keystone/latest/user/application_credentials.html We should use app credentials to:

• avoid propagating the password into the k8s-capi-provider domain
• have the ability to apply restrictions if needed