Merge branch 'env-file-security' into 'main'

move JWT secret and admin token to environment variables

See merge request !45