v0.1.21 — headless/container auth: graceful keyring degradation + env-based credentials (EOCUBE_ACCESS_TOKEN / ROCS_AAI_REFRESH_TOKEN / client credentials)