pub fn credentials_path() -> PathBufExpand description
Path to the global credentials file: <heddle_home>/credentials.toml.
Uses the same home resolution as device identity ($HEDDLE_HOME if set,
else $HOME/.heddle), so credentials and device keys stay co-located.