[yordis]

• The provider picker took most of the row, squeezing the secret reference to a few characters, so the reference could not be read or edited comfortably.

[cursor]

PR Summary

Low Risk
UI-only layout and display changes in settings secret inputs; no auth, data, or API behavior changes.

Overview
Fixes cramped secret reference editing in provider/environment settings by shrinking the source picker and letting the reference field use the remaining width.

The secret source Select trigger is now icon-only (SourceIcon) with a title tooltip for the provider name, and uses w-auto shrink-0 instead of a full-width label. Fixed-width wrappers (w-48 / w-28) around the picker in ProviderInstanceCard and the default SecretSourceInput layout are removed so the reference DraftInput can flex-1 and show more of the path.

^{Reviewed by Cursor Bugbot for commit 1fc98ec. Bugbot is set up for automated code reviews on this repo. Configure here.}