Use GitHub Environments to protect secrets

[galargh]

https://docs.github.com/en/actions/deployment/targeting-different-environments/using-environments-for-deployment