Add `truss secrets diff` command

[adamgoose]

Same as push, just not the push bit.

[kbence]

Currently view kinda' does that, but I'd separate this functionality so the view output could stay clean and I could parse it with yq or something...