docs: Document AUTHCONTEXT secret lookup chain and Key Vault underscore limitation (#2168)