feat(sanctuary): better error reporting for 1password items

If a 1password item is specified with a field name which does not exist, report a better error message rather than asserting with a "should not be reached" assertion.