Read Sql Credentials

Issue a short-lived SQL warehouse credential to the caller's kernel.

A running kernel cannot receive an updated environment, so a token injected at kernel start would be pinned to a value that expires within the hour. The kernel calls this per connection instead; nothing durable is written into its environment.