Variable SECRET_KEYS`Const`

SECRET_KEYS: readonly [
    "WEBHOOK_SECRET",
    "SIGNING_SECRET",
    "SIGNING_SECRETS_PRIOR",
] = ...

Every name loadSecrets reads. Kept apart from CONFIG_KEYS so the log-safe policy list can never grow a credential.