Function resolve_credentials 

pub fn resolve_credentials() -> Result<Credentials, CredentialError>

Resolve the OAuth access token via the cascade in docs/specs/credentials.md §Resolution cascade: macOS Keychain (primary + multi-account) on macOS, then file-based cascade on all platforms. Memoization for process-lifetime reuse is the caller’s responsibility; each invocation re-runs the full cascade.