remove forem/base css to fix heroku push

you may add it back later if you get it working...
move secret keys into env add database.yaml

not good to git-commit secret keys.
also we want to push a database.yml file to heroku and to do that we need to add it - but with username/password for production redacted into dotenv file