move airbrake api key to .env
move secret token to .env

(and generate a new one)
move paperclip production config to environment
ignore dev uploaded images