Impliment the new secrets for all our services

[duallain]

After we decide what to do with secrets, we should write how to do that in this story and then copy it into logical chunks. For example, maybe each service gets a story. Or, we could migrate types of secrets, aws credentials, etc.

This work would likely benefit from writing out a complete list of secrets, where they are stored and how to rotate. We should keep that documentation somewhere for the future.