client: fix corner cases in secret declaration

[creachadair]

1. Don't allow an empty secret name to be declared. While in principle this could be fine, it is weird and not worth supporting.

2. Deduplicate secret names before initialization. I originally thought this was not needed, but because of the way we merge cached results with the initialization step, duplicates can "poison" the initialization state.