Remove sensitive sync-settings setting data

Don't upload the `personalAccessToken` or `gistId`.