Can you reference secrets through a

StackReference

? Ie. Is the secret provider configuration within the stack state itself so that if you have a sufficiently authenticated environment it will be able to decrypt the secrets referenced from another stack?

yes