You can upload files to the Backendless File Service and setup the permissions for the files security. In case you’ll use the JS API Service, you can add the json file to the API Service folder and make it required inside the service: const config = require(‘./config.json’)
Yes, it will be safe if you setup the file permissions.
Yes, there’s an API SERVICES tab in Codeless for this purpose: