How would you build a CI/CD pipeline for migrating services to Kubernetes with Vault and ArgoCD?