Different secrets for different workflows

Thanks @bdaniels! Makes perfect sense, seems to be a duplicate of Allow workflow-specific secrets