Add secret_tokens.rb to version control

The token is read from the environment, so we don't need to take the extra precaution.