Move interceptor recipients to secrets.yml; add purchases count to users API