Monitoring and other improvements

[johnalotoski]

• Fixes monitoring timex sync status with chronyd service
• Refactors the role-block-producer nixos module and adds pool convenience aliases
• Refactors jobs for updated secrets layout
• Adds sops encryption/decryption integration to jobs
• Adds bulk pool secrets regeneration on kes job rotation
• Adds no-deploy secrets directory option to jobs
• Adds a secrets encryption check to the pre-push hook
• Adds terraform grafana, loki and mimir providers
• Adds group relay multivalue DNS terraform support
• Adds shell convienence bins to module-cardano-node-group
• Adds profile-grafana-agent for nixos monitoring
• Updates template files for monitoring, secrets and other changes in this PR