secrets: the typescript load route resolves its override declarations

buildOverrideResources got the resolved sources on the clone path but
not on POST /v1/workspaces/load, so an override mount pointing at a
declared alias reached sourceFor as a provider name and 400'd. Python's
load route already did this; the router test fails without the fix.