A secret is a value that grants access

API keys, database passwords, signing keys, access tokens. If holding the value lets you do something you otherwise could not, it is a secret.

The test is not whether it looks random. It is whether possession equals permission.