redact settings containing 'secret' besides 'password'

Ensure that settings with the word 'secret' in the name are redacted just
as ones with 'password' in the name are. For example, the Google Auth
client secret should be redacted now.

closes #4206

add supressNav property to plugin pages.

close #4209

- dashlist will only show dashboards from same org
- notfound dashboards will not be added

closes #4207

This allows pages to be registered that dont show up in the
Navigation menu when the App is pinned.

closes #4205

feat(templating): lots of progress on template variable context specific formats, #2918, all elasticsearch / lucene use cases seem to work now

Loading pulse

Update repo in package.json to point to official

Fix typo in function name

closes #4194