feat: add apiToken handling to external-dns-raw template

[vaheed]

📌 Summary

Fixes a template bug in external-dns-raw.gotmpl where the Cloudflare provider references
.apiSecret, which is not defined in the Helm values schema. The correct field is .apiToken.

Why this is needed

When External-DNS is enabled with Cloudflare, otomi apply fails during Helm values rendering:
executing "stringTemplate" at <.apiSecret>: map has no entry for key "apiSecret"

Related issue

Fixes #2916

🔍 Reviewer Notes

🧹 Checklist

• Code is readable, maintainable, and robust.
• Unit tests added/updated

[merll]

Thank you for the report @vaheed and for the PR. Both apiSecret and apiToken exist in the schema, for allowing for both authentication methods to CloudFlare supported by external-dns. Using one or the other value is used to determine which variables to set.

Of course the template rendering should not fail if either of the values is missing. My suggestions above should fix this issue.