Make help string for --show-vars accurate.

The output includes variables discovered by the agent, and those
defined in policy that do not have a dependency to user-defined
classes (as those are evaluated after variables).