docs: soften DuckDB notebook auth callout to match tutorial

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: aboydnw

quickstarts/duckdb.ipynb

@@ -68,7 +68,7 @@
     "",
     "DuckDB's Azure extension reads signed Planetary Computer blobs directly. Fetch a container SAS from the token API, register a secret, and switch the Azure transport to curl.",
     "",
-    "Two details that will cost you an afternoon otherwise:",
+    "Two important details:",
     "",
     "- `azure_transport_option_type = 'curl'` is required. The default transport fails with an opaque SSL CA-certificate error.",
     "- The `SCOPE` matters as soon as you add a second account (the join below). DuckDB routes each read to the secret whose scope is the longest matching prefix. Without scopes, a second Azure secret shadows the first and every read fails to authenticate.",