control-service: set Team oAuth Creds as secrets (#3403)