Remove hard-coded tokens and URL

This needs to be fixed by using environment variables.

Having security-related tokens / credentials in a repository has to be avoided.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information