Migrate concourse pipeline to use credhub and expose a limited number
of jobs as "public".

Closes gh-10693