Document usage of `secrets` in serverless.yml

Description

It is currently possible to attach Kubernetes secrets to functions deployed to Knative.

One needs to use env-secrets / secrets keyword to do so.

This is missing ~"group::serverless and paas" documentation.

/cc @nicholasklick