derive addons and env from heroku apps; redact secrets