secure-boot-otp-provisioning: Reword the README.md

[BaochengSu]

Change the TUI method description according to the latest Kconfig wordings.

Meanwhile make the third key generation not optional, to trim the operation branches.