Adjust secrets file process

Ok, brain slip up the other day. The previous method would cause your secrets.js to be overwritten by the `INSERT_YOUR_KEY_HERE` version every time you merged, which is less than ideal.  Now it exists as a `.template` file, which you should duplicate into `secrets.js`, which will never be tracked. Better solution. :smile:  Fixes #9, again.