Buildkite secrets are fetched from GSM

Created by: ElizabethStirling

BuildKite secrets should be fetched from Google Secret Manager. A plugin example exists here, but we should consider the security implications of using externally owned code to automatically fetch our secrets. We should probably fork this, or roll our own.