Add credential rotation items for EP infra project

Context

We have two places where we store secrets: CI/CD env variables, and Google Secret Manager (GSM).

What's in this MR?

Some instructions on how to rotate credentials for review-apps and qa-resources.