Isolate production service integrations from non-production, and move all to env variables

[theblockstalk]

Acceptance criteria:

• all services (e.g. infura, hcaptcha, domain) use a separate service account For the production environment
• all secret and non-secret keys are changed to environment variables and not hardcoded
• All keys are changed for new keys