Present documentation does not capture that secrets are only visible if ACTIONS are enabled for a repository. This PR adds a short note