Add a self-test for leaked secrets

[klutchell]

There is an experimental branch here with some secrets tests: https://github.com/product-os/flowzone/tree/kyle/secret-leak-check

However the issue is that calling additional workflows like secrets.yml does not get a new run_id, and GH API will not allow downloading of logs from a workflow run in progress for some reason.