fix: Add kms:decrypt
policy for External Secret
#349
Merged
kms:decrypt
policy for External Secret
#349