Prefer secret value to secret instance ID (#33877)

When secrets get updated, both the new value and the ID of the old
secret instance are in the details. Preferring the ID of the old
instance means that the connection test uses the old (and likely
invalid) secret.