d930f4c82d
- Added `getCredentialOrigin` and `getEnvApiKeyName` to classify auth source. - Surfaced provenance tags in the `/login` and `/logout` provider picker. - Made the picker search filter match credential origin and env var name. - Added coverage for credential-origin precedence and env naming.