Preserve provider readiness and managed files while adapting stable
credential delivery to the current supervisor and workspace APIs. Keep
protobuf field assignments compatible with upstream.
Exercise one persistent caller-assertion client across external rotation,
with an ordinary-reference control and verified HTTPS denial cases.
Signed-off-by: Shiju <shiju@nvidia.com>