Store Heroku API key on database

I haven't written any test for this feature, as we know already that we will
throw it away (hopefully), replacing it for something more appropriate.

By the way, this should do the job for the MVP.