Add secrets .gitattributes to secrets dir and avoid encrypting it. Fixes an issue with .gitkeep causing build failures on unlocked repos.