Add secrets.yml to source control, using shell variables for secrets