Add support for secret, server-side only config

Having a server-side only configuration directory is important for storing things like API keys, setting up roles, and populating Accounts. Maybe the root config directory could be split up between client and server but for now, I just added a server-side config directory with subdirectories for storing secret info for dev, staging, and prod environments.