Incorrect diff rendering for compound secret values

[pgavlin]

When the diff for a resource references nested properties of a compound secret value, the nested properties are not rendered properly. For example, in the diff below, the service and apiVersions properties should not be empty objects, and should instead be displayed as changes from [secret] => [secret] (as the values are, after all, secret).

        ~ kubernetes:admissionregistration.k8s.io/v1:ValidatingWebhookConfiguration: (update)
            [id=aws-load-balancer-controller-validating-webhook-configuration-4wkyh883]
            [urn=urn:pulumi:mm-3f33882c::aws-eks-webapp-ingress-typescript::cloud:x/aws/eks:LoadBalancerController$kubernetes:admissionregistration.k8s.io/v1:ValidatingWebhookConfiguration::aws-load-balancer-controller-validating-webhook-configuration]
            [provider=urn:pulumi:mm-3f33882c::aws-eks-webapp-ingress-typescript::pulumi:providers:kubernetes::k8s-provider::0f395882-5060-434b-84a1-98fce94a4741]
          ~ webhooks: [
                [0]: <null>
              ~ [1]: {
                      ~ clientConfig: {
                          ~ service: {
                            }
                        }
                      ~ rules       : [
                          ~ [0]: {
                                  ~ apiVersions: [
                                    ]
                                }
                        ]
                    }
            ]

[pgavlin]

Fixed by #9351.