Switch cli_h1 headings to cli_h2 (or configurable)

[selkamand]

Rationale: If you connection to a database in a semiautomated workflow the h1 headings make it difficult to cleanly integrate the error messages with a larger pipeline