Tails

We should git fetch && git reset --hard origin/master before each test suite run so new secrets are used without having to ping the sysadmin team to do this manually.

Example: right now some changes done in the feature branch of Feature #12242 depend on new secrets, which I have pushed to the secrets repo, but all affected tests fail because the repo is not kept up-to-date on Jenkins’ isotesters.