Add back secrets.yml since prod will use get from ENV

Signed-off-by: Max Fierke <max@maxfierke.com>