Environment variables now use Config and Secret types

Choose Config or Secret when adding environment variables in the dashboard and CLI. Config values stay readable to authorized members; Secret values are write-only after saving.