Credential provider is useful without the v1 API, move the only dependency out so that we can more easily move credential provider to a utility library in the future (other callers besides Kubelet may need to load pull secrets like Docker).