Fix secpick to use EE and guess branch name

bin/secpick didn't work for EE branches.

Also added a default current branch so we don't have to specify it.

Fixes gitlab-org/release/tasks#483 (closed)