Add environment variable to specify .gitlab_workhorse_secret filename

omnibus-gitlab uses a symlink that must be generated in the Rails.root directory, but if this symlink is not generated for some reason unicorn will generate a new file, set it to mode 0600, and fail to start due to a permission error. Rather than play games with symlinks, we should specify the path directly through an environment variable.