Fix the default sha for bin/secpick

Why:

* The shell command to read the current sha has an ending newline that
  should be stripped.

This change addresses the need by:

* strip whitespace from sha when reading the current sha
* refactor original_branch to strip whitespace at the point it could be
  introduced