JSON files that get committed to a git repo, obviously. They're in a private repository in GitHub so that takes care of security and resiliency, two birds with one stone.