fix: use .secrets dir within cwd (not parent)

fix: use .secrets dir within cwd (not parent) #456