Move secrets out of git

The previously-published tokens have been revoked. Secrets are
now kept in secrets.py, which is not in git.