BUILD-4733: Use vault secrets instead of github

Missed that one

Author: tomverin

.github/workflows/update_coverage.yml

@@ -12,13 +12,18 @@ jobs:
       TMP_BRANCH: temporary/coverage_update
 
     steps:
+    - name: get secrets
+        id: secrets
+        uses: SonarSource/vault-action-wrapper@7160b50d75c02fe48eb3c8d354ca4fd7029f546a # tag=2.5.0-4
+        with:
+          secrets: |
+            development/github/token/SonarSource-rspec-coverage token | COVERAGE_GITHUB_TOKEN;
     - uses: actions/checkout@v4
       with:
         persist-credentials: true
         ref: master
         path: 'rspec'
-        token: ${{ secrets.COVERAGE_GITHUB_TOKEN }}
-
+        token: ${{ fromJSON(steps.secrets.outputs.vault).COVERAGE_GITHUB_TOKEN }}
     - uses: actions/setup-python@v4
       with:
         python-version: '3.9'
@@ -33,7 +38,7 @@ jobs:
 
     - name: 'Regenerate coverage information'
       env:
-        GITHUB_TOKEN: ${{ secrets.COVERAGE_GITHUB_TOKEN }}
+        GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).COVERAGE_GITHUB_TOKEN }}
       id: gen-coverage
       working-directory: 'rspec/rspec-tools'
       run: |