Use data instead of stringData for capmox-variables Secret

stringData is never stored, so kubectl apply reported "configured" on
every run and the capi play was never changed=0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ansible/templates/capi-providers.yaml.j2

@@ -13,10 +13,12 @@ metadata:
   name: capmox-variables
   namespace: capmox-system
 type: Opaque
-stringData:
-  PROXMOX_URL: "{{ proxmox_url }}"
-  PROXMOX_TOKEN: "{{ proxmox_token_id }}"
-  PROXMOX_SECRET: "{{ proxmox_token_secret }}"
+# `data`, not `stringData`: stringData is never stored, so `kubectl apply` would report
+# "configured" on every run and break the playbook's changed=0.
+data:
+  PROXMOX_URL: {{ proxmox_url | b64encode }}
+  PROXMOX_TOKEN: {{ proxmox_token_id | b64encode }}
+  PROXMOX_SECRET: {{ proxmox_token_secret | b64encode }}
 {% for p in capi_providers %}
 ---
 apiVersion: operator.cluster.x-k8s.io/v1alpha2