Move split secrets into single env file

Separating state secrets and others made life a pain. Just do everything in an env file instead, which makes syncing a lot simpler

scripts/terraform/terraform.sh

@@ -1,9 +1,12 @@
 #!/usr/bin/env bash
 
-set -ex
+set -e
 
 cd terraform/
 
-source secrets.sh || true
+# Load secrets from env file (if it exists)
+set -a
+source ./.env || true
+set +a -x
 
 terraform $@