Initial commit for git-secrets

[gwadley]

This is a version of our git-secrets workflow with actions included inline to avoid using secret values in a public repository