Update repository-settings.md with actual secrets and variables

Author: trask

.github/repository-settings.md

@@ -0,0 +1,24 @@
+# Repository settings
+
+This document describes any changes that have been made to the
+settings in this repository outside the settings tracked in the
+private admin repo.
+
+## Secrets and variables > Actions
+
+### Repository secrets
+
+- `GPG_PASSWORD` - stored in OpenTelemetry-Java 1Password
+- `GPG_PRIVATE_KEY` - stored in OpenTelemetry-Java 1Password
+- `SONATYPE_KEY` - owned by [@trask](https://github.com/trask)
+- `SONATYPE_USER` - owned by [@trask](https://github.com/trask)
+
+### Organization secrets
+
+- `DEVELOCITY_ACCESS_KEY` (scoped only to Java repos)
+- `FOSSA_API_KEY`
+- `OTELBOT_PRIVATE_KEY`
+
+### Organization variables
+
+- `OTELBOT_APP_ID`