Update help messages with new wording (#8616)

Final update to all messages across sub-systems
after final review, the only change here is that
NATS now has TLS and TLSSkipVerify to be consistent
for all other notification targets.

cmd/config/identity/ldap/help.go

@@ -28,36 +28,36 @@ var (
 		},
 		config.HelpKV{
 			Key:         UsernameFormat,
-			Description: `AD/LDAP format of full username DN e.g. "uid={username},cn=accounts,dc=myldapserver,dc=com"`,
+			Description: `username bind DNs e.g. "uid=%s,cn=accounts,dc=myldapserver,dc=com"`,
 			Type:        "string",
 		},
 		config.HelpKV{
 			Key:         GroupSearchFilter,
-			Description: `search filter to find groups of a user (optional) e.g. "(&(objectclass=groupOfNames)(member={usernamedn}))"`,
+			Description: `search filter for groups e.g. "(&(objectclass=groupOfNames)(memberUid=%s))"`,
 			Optional:    true,
 			Type:        "string",
 		},
 		config.HelpKV{
 			Key:         GroupNameAttribute,
-			Description: `attribute of search results to use as group name (optional) e.g. "cn"`,
+			Description: `search attribute for group name e.g. "cn"`,
 			Optional:    true,
 			Type:        "string",
 		},
 		config.HelpKV{
 			Key:         GroupSearchBaseDN,
-			Description: `base DN in AD/LDAP hierarchy to use in search requests (optional) e.g. "dc=myldapserver,dc=com"`,
+			Description: `group search base DNs e.g. "dc=myldapserver,dc=com"`,
 			Optional:    true,
 			Type:        "string",
 		},
 		config.HelpKV{
 			Key:         STSExpiry,
-			Description: `AD/LDAP STS credentials validity duration e.g. "1h"`,
+			Description: `temporary credentials validity duration in s,m,h,d. Default is "1h"`,
 			Optional:    true,
 			Type:        "duration",
 		},
 		config.HelpKV{
 			Key:         TLSSkipVerify,
-			Description: "enable this to disable client verification of server certificates",
+			Description: `trust server TLS without verification, defaults to "on" (verify)`,
 			Optional:    true,
 			Type:        "on|off",
 		},

cmd/config/identity/openid/help.go

@@ -28,13 +28,13 @@ var (
 		},
 		config.HelpKV{
 			Key:         ClientID,
-			Description: `client identifier of the authenticating party at the identity provider`,
+			Description: `unique public identifier for apps e.g. "292085223830.apps.googleusercontent.com"`,
 			Type:        "string",
 			Optional:    true,
 		},
 		config.HelpKV{
 			Key:         ClaimPrefix,
-			Description: `openid JWT claim namespace prefix e.g. "customer"`,
+			Description: `JWT claim namespace prefix e.g. "customer1"`,
 			Optional:    true,
 			Type:        "string",
 		},