Use envconsul+vault to manage secrets

[SuddenGunter]

Current secret management of uncommited locally changed config files is becoming unusable at scale.
Having configs somewhere in locally deployed vault + all apps going to that vault via envconsul should be much better.

Alternative approaches are also fine