removed secrets.yml from shared area and added .env file instead
use the same secrets config for staging and production