git: add note about not committing secrets/sensitive data

[jonahkagan]

Also might be good to elaborate on strategies to avoid this (e.g. git add -p, git commit -v)