Function resolve_credential_with_mode 

pub fn resolve_credential_with_mode(
    provider: &str,
    key_name: &str,
    workspace: Option<&Path>,
    storage_mode: AuthCredentialsStoreMode,
) -> Result<Option<ResolvedCredential>>

Resolve a provider/key credential with explicit storage mode.

Precedence is process environment, workspace .env, provider OAuth, and key-scoped secure storage. Provider-only storage is considered only when key_name is equivalent to the provider’s default environment variable; such an entry is migrated lazily into the key-scoped namespace.