Secrets in .env and code on GitHub

Prepping the bot for its server move: secrets go into a .env file, code goes to GitHub — with tokens kept OUT of the repository. The .gitignore file is tiny but saves you from big trouble.