allow setting executor to build_publish_docker job

the cimg/base:stable image have a too old version of curl
that doesnt support fail with body command. By parameterising this
option users can change to any image e.g. cimg/base:current which have a
newer version of curl

make get_secret sh instead

Bash is not available on all machines, so to make this more available we
target sh instead

make get_secret command generate executable script

rename command so circleci can find it

add generate_get_secret for te-safe

disable bash -x mode, aka debug mode

add urlmap deploy to deploy_to_mig job

Add STEP to job parameter

remove empty line