schematic/settings: store mysql password in env

This should be done after the push today.