switch secrets to loading from env - towards a more unified way of handling secrets

Build and push image

Success

Set up job1m42s
Complete job0s