Move Secrets to .cscfg file

This is a preliminary pass on moving all of our secrets to the cscfg. See some comments inline. I'd like to get this to preview during the next iteration, depending on how QA feels. We can chat about it later.

Fixes #725