Refactor/document credential handling

[eric-zeng]

• Document where Android/iOS keys should go (src/cordova/config.xml)
• Refactor src/web/lib/web-notifications.js so that it reads from a git-excluded config file
• Document which files need to go in src/config (firebase keys, smartthings tokens)