Credential Proxy

Server-side credential injection for external runners (CLI, GitHub Action)