Remove config/secrets.yml

We use different secrets in production, so it's harmless, but shouldn't be provided by default.