move dashboard, add sealed secrets

apps/kube-dashboard/base/kube-dashboard-user-secret.yaml

@@ -0,0 +1,11 @@
+# Create long-live bearer token
+# retrieve with: `kubectl get secret dashboard-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d`
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: dashboard-user
+  namespace: kubernetes-dashboard
+  annotations:
+    kubernetes.io/service-account.name: "dashboard-user"   
+type: kubernetes.io/service-account-token