add support for "secret" plugins

Secret plugins don't appear in generic help, to reduce user confusion.

All builtin commands are secret, unless you make them not by
setting builtin_xxx.secret = False.

Python plugins are secret if they set secret = True in their
global namespace.

Shell plugins are secret if their filename ends in .shh instead
of in .sh.
make connect archive command secret