add out for secrets dir

.github/workflows/render-site.yml

@@ -70,12 +70,14 @@ jobs:
           exit 1
 
 # Commit the rendered site files - html files and site_libs files
+# The git reset step will remove any other files created in this workflow, such as API keys
       - name: Commit rendered site files
         run: |
           git config --global --add safe.directory $GITHUB_WORKSPACE
           git config --global user.name 'github-actions[bot]'
           git config --global user.email 'github-actions[bot]@users.noreply.github.com'
           git add --force docs/*
           git commit -m 'Render site' || echo "No changes to commit"
+          git reset --hard HEAD
           git pull --rebase --allow-unrelated-histories --strategy-option=ours
           git push origin main || echo "No changes to push"