Do not include secrets in the Docker image #71

Updated SecretConfigSource to check JVM then env vars for secret
location. Removed calls in dockerfile to contain secrets, and instead
expect it to be mounted as a volume. Instructions in docker file has
been updated.

Signed-off-by: Martin Lowe <martin.lowe@eclipse-foundation.org>