Security review on deployment

[richard-jones]

• PR: [when the PR is created, put a link to it here. DO NOT use the "linked PR" feature]
• User Test Scripts: [when there are user test scripts available link them here]

---

Review the deployment pipeline with specific eye to any security implications, and implement any changes to secure the environment and the credentials.

This will include (but not limited to):

• Everything is in the vault
• No hard coded environment variables

Acceptance Criteria

List the criteria which must be met for the issue to be considered complete

• An agreement by CL and Imperial that the deployment is as secure as reasonably possible

[richard-jones]

• Ensure that all the secrets are shared securely and held somewhere secure