* refactor(credentials): derive rpc secret and remove iam keygen * fix(credentials): reject default access key RPC secret * test(credentials): align RPC fallback and add keygen coverage
* refactor(credentials): derive rpc secret and remove iam keygen * fix(credentials): reject default access key RPC secret * test(credentials): align RPC fallback and add keygen coverage