Per-request authorization for a CodeSource URL fetch. Never persisted
beyond the fetch it authorizes (see RegistryAuthHandler's removal --
this replaces its unconditional shared-bot-by-host model). basic/
bearer carry the secret directly; named is a server-resolved
reference (e.g. "virtufin" for the org's own shared registry
credential) so that secret never has to be distributed to callers.
Per-request authorization for a CodeSource URL fetch. Never persisted beyond the fetch it authorizes (see RegistryAuthHandler's removal -- this replaces its unconditional shared-bot-by-host model).
basic/bearercarry the secret directly;namedis a server-resolved reference (e.g. "virtufin" for the org's own shared registry credential) so that secret never has to be distributed to callers.