Correctly resolve %%node%% variable in Vault policies

Summary:
The credential nasqueron/notifications/notifications-cli/%%node%% is now
correctly resolved to .../windriver instead of .../complector.

This is a follow-up for 936e401ff3a4.

Test Plan:
Paths are as expected:

• ops/data/secrets/nasqueron/notifications/notifications-cli/windriver
• ops/data/secrets/nasqueron/notifications/notifications-cli/ysul

Reviewers: dereckson

Differential Revision: https://devcentral.nasqueron.org/D3098