hedgedoc: limit secret acccess to root
So far every user on the system was able to read the secrets from the world-readable config.json. Move these secret into the systemd service file and limit its read rights to root.
Closes #562 (closed)
cc @lahwaacz