fix(vertex,bedrock): never send ambient first-party credentials to provider endpoints (#287)