add secrets.yml to .gitignore and include secrets.yml.sample