configmgr support for configuring vaults

We've added baremetal vault support, but getting configmgr to generate the right configuration is tricky.

In environement.xml under "/Environment/Software" we need to be able to add entries for

<vaults>
  <git name="" url="" kind="" client-secret="" />
  <ecl name="" url="" kind="" client-secret="" />
  <eclUser name="" url="" kind="" client-secret="" />
</vaults>