[Catalog] Rotating container provided object store credentials

[snazy]

Instead of providing the object store secrets used by Nessie via a secrets-manager (incl Quarkus), add a way to get object store credentials via the container (or VM or pod).

Container provided credentials are not to be considered static, but those can be rotated, so we have to have a way to re-retrieve those periodically.

This approach is likely only useful for VMs/pods accessing an object store within the same (public?) cloud.

[snazy]

Note: S3 + GCS look good with APPLICATION_GLOBAL/APPLICATION_DEFAULT auth-type settings. ADLS needs to be proven though.