Move secrets and DB config to env-driven settings so prod can run on shared Postgres behind deploy.sh, matching company_site.