secret: rename from secrets to avoid conflict with db.secrets

Created by: unknwon

Simply rename internal/secrets to internal/secret to avoid import path rename in every single place because it conflicts with db.secrets variable.

This is a subset of #13759 and extracted here to have much smaller diff to review.