secret keys should not be hardcoded in solution images

[sameh-farouk]

eg, in Taiga image we have hardcoded secret keys,
secrets should be generated dynamically either from the Weblet side then passed as env var or in the VM init script.

Running a web app with a known secret key defeats many of its security protections, and can lead to privilege escalation and remote code execution vulnerabilities.