Add secret management instructions to CURSOR_MUST_READ.md

- Included guidance on using the secret manager `rsec` for fetching secret values.
- Emphasized the importance of obtaining user permission before accessing secrets.