Prep for staging and production envs

- using figaro for managing env vars
- moving secret out of repo (and will regenerate for staging/production)