Create secrets.telegram_notify_bot_token so we can use it in the URL of RestApi

[chrisli30]

Although secrets all start with secrets., they have different scopes. We don’t need to implement the permission restriction for the scope now, but let’s make sure secrets have such attribute scope.

My understanding is that each secret object should contain the below properties, and we can use an array to store them [secretObj, secretObj, secretObj]

name, // the variable’s name
value, // the variable’s value
scope:

• global // Consider calling this "app", as application-level, for example, telegram notification is just an application from our program.
• org // Organization level, it’s a place-holder for Github organization level access
• project // We could optionally call it workflow, but project sounds more general, and in future we might create project which can contain multiple workflows, similar to a Github repo