fix(cli): pass Cargo credential provider settings to mobile IDE builds

The options server secret filter added in #16099 drops every variable whose
name contains CREDENTIAL or SECRET, which also removed Cargo settings that
only select how credentials are obtained:
CARGO_REGISTRY_CREDENTIAL_PROVIDER, CARGO_REGISTRIES_<name>_CREDENTIAL_PROVIDER,
CARGO_REGISTRY_GLOBAL_CREDENTIAL_PROVIDERS, CARGO_CREDENTIAL_ALIAS_* and
CARGO_REGISTRIES_<name>_SECRET_KEY_SUBJECT. Builds started from Android
Studio or Xcode then failed to authenticate against private registries.

These variables name commands or public identifiers, not secrets, so they are
now forwarded. Registry tokens and secret keys are still filtered out.