Restrict RetrieveSecret to Ponos agents and tasks

Closes #1453 (closed)

I updated the authentication_classes so that only agent or task auths can be used, which documents this restriction nicely in OpenAPI:

This also simplifies the work for #1273 since there are less cases to check!