Add credential rotation items for EP infra project
Context
We have two places where we store secrets: CI/CD env variables, and Google Secret Manager (GSM).
What's in this MR?
Some instructions on how to rotate credentials for review-apps and qa-resources.