Read segments analytics token for preview environments from a secret

Previously the segment token was passed in through Werft attributes, which meant that the tokens would be instantly leaked as they show up in the Werft UI.

Tarun and I will instead move the token to a secret and read it on-demand instead.