move all process.env references to secrets
lint fixes