Add guidance on environment variables and tokens

[egrace479]

The handling of API Keys and other similarly sensitive information required for projects should be addressed in a section or page. This could include the quick code to access them in both Python and R as well as recommendations for how to address this with GitHub repos (notably, not to hardcode or commit them!).