keybase for credentials

[lucymhdavies]

e.g. when running locally, use /keybase/private/lmhd for stuff like AWS credentials.

when running in CI, use env vars