Add support for external secrets

• Secrets can now be stored in a separate secrets.json file and inserted in settings.json and triggers.json via mustache templates. Resolves
  issue 371.
• Update a package dependency to resolve a security vulnerability.