Use externalsettings to get secrets and other settings

Take from https://gitlab.developers.cam.ac.uk/uis/devops/gsuite/g-suite-authenticator

Implement uis/devops/webapp-boilerplate#48 (closed) if it hasn't already been implemented as part of this issue.