feat(api): support environment variable vault credentials (#3905)

## Summary

Create and rotate environment-variable vault credentials with explicit
networking permissions.

## Changes

- Add environment-variable authentication for vault credential creation
and rotation
- Expose credential networking permissions as separate request and
response models
- Read environment-variable credential metadata without exposing secret
values in response declarations