fixup: move docs slightly

Signed-off-by: Todd Baert <todd.baert@dynatrace.com>

Author: toddbaert

docs/feature_flag_source.md

@@ -115,30 +115,26 @@ envVars:
     value: <SAS token>
 ```
 
-Alternative way to provide credentials is to use Kubernetes secrets, for example:
+Other types of credentials for Azure Blob Storage are supported; for details see
+[AZ credentials config](https://pkg.go.dev/gocloud.dev/blob/azureblob#hdr-URLs).
+
+#### Google Cloud Storage
+
+## Environment variables
+
+`envVars` can be used to pass environment variables to the injected flagd sidecar. Values can be set inline or referenced from Kubernetes secrets:
 
 ```yaml
-sources:
-  - source: azblob://my-bucket/test.json # my-bucket - container name
-    provider: azblob
 envVars:
-  - name: AZURE_STORAGE_ACCOUNT
-    valueFrom:
+  - name: MY_VAR
+    value: my-value           # inline value
+  - name: MY_SECRET_VAR
+    valueFrom:                # value from a Kubernetes secret
       secretKeyRef:
         name: my-secret
-        key: account_name
-  - name: AZURE_STORAGE_SAS_TOKEN
-    valueFrom:
-      secretKeyRef:
-        name: my-secret
-        key: sas_token
+        key: my-key
 ```
 
-Other types of credentials for Azure Blob Storage are supported; for details see
-[AZ credentials config](https://pkg.go.dev/gocloud.dev/blob/azureblob#hdr-URLs).
-
-#### Google Cloud Storage
-
 ## Sidecar configurations
 
 `FeatureFlagSource` provides configurations to the injected flagd sidecar.