Doc: tools: improve cibsecret help
Also use cat<<EOF instead of echo to avoid a shellcheck false positive.