container: Add support for specifying secret type (untested)

roles/container/vars/main.yaml

@@ -22,6 +22,18 @@ _container_mounts: >-
       | zip(_container_volume_mount_sources) | map('combine')
   }}
 
+_container_secrets: >-
+  {{
+    container_secrets
+    | map(attribute='name')
+    | zip(
+      container_secrets
+      | map(attribute='type', default='mount')
+      | map('regex_replace', '^', 'type=')
+    )
+    | map('join', ',')
+  }}
+
 _container_quadlet_unit_options: |
   [Unit]
   Description=Container {{ container_name }}