Don't do a spurious sys.path.append anymore.

Instead, the caller will need to have webapp/ on their PYTHONPATH.
They also need secrets.py on their PYTHONPATH.

Jenkins does both of these things by default, so this is just a
documentation update.

Auditors: chris

Test Plan:
env PYTHONPATH=../webapp/tools ./deploy_pipeline.py --help
succeeded.