Update README with SECRET_TOKEN setup instructions