List OpenStack API credentials in the project

Lists the OpenStack application credentials minted for this project: the caller's own credentials always; service-account credentials when the caller holds tokens: manage; every credential in the project when the caller holds iam: manage. The secret is NEVER returned here — it exists only in the create/rotate 201 response. Revoked/expired credentials stay listed with revokeReason so the console can explain why a credential stopped working (e.g. role_change: a role change on the project made the cloud delete every credential of that owner there). access describes what the CALLER may do here: whether direct API access is enabled for the organisation, the Keystone roles projected from the caller's portal permissions, the profiles available, the portal-side limits, and the public identity endpoint + OpenStack region a clouds.yaml needs (identityUrl / regionName, null when not known yet -- endpoint card). Authorization: compute, network and storage at least read on the project (the edge floor is compute read). Pagination: {data, meta, access}; page / pageSize (max 200, default 50), newest first; meta.total counts what the caller may see. Retention: a revoked or expired credential stays listed for 90 days after it stopped working, then its row is deleted (audit records are kept separately). Errors: 401; 403; 404 unknown/unreachable scope.