add secrets.yml to .gitignore