Please use the VSC SecretStorage API to avoid adding PAT in settings.json

[wolf99]

Currently the HA personal access token (PAT) needs to be added in vscode's settings.json.
This is not great for security purposes, especially if users sync their settings.json (even worse if a user syncs this in some public way, such as a github gist using the popular SettingsSync extension).

Request that instead this extension should make use of vscode's API that was first introduced as Secrets in vscode 1.53. and, I think, has since evolved to SecretStorage.

• Secrets API in vscode 1.53 release notes: https://code.visualstudio.com/updates/v1_53#_secrets-api
• SecretStorage API docs: https://code.visualstudio.com/api/references/vscode-api#SecretStorage
• Article explaining another risk with storing secrets in settings: https://www.eliostruyf.com/protect-api-auth-keys-keeping-out-vscode-settings/