do_deploy returns, even if it is successful

account for it.
update secrets needs to know the ruby environment

since it will be called from pre_production and production deploys