Update README.md file to clarify passing in `FOSSA_API_KEY` as an environment variable

The example currently shows how to read the `FOSSA_API_KEY` environment variable in as a secret. This should be clarified with a note on how a drone repository / server instance would be configured with an org secret.

Reference(s):
- https://docs.drone.io/secret/organization