Ensure secrets are enabled for all builds. This disables the auto-detection done by default by builds.sr.ht when the secrets arg is left unspecified. While at it, remove the unbound $execute variable.