Add app secrets and apps services

This just moves code from the dashboard client into the shared repo.

@harrison look good?