what is the consensus of storing the pulumi.stack.yml containing secrets (encrypted) in github?