drivers/

Package env ships the default credential source: the OAuth provider's client credential is read from the process environment ONCE at boot.

Package remote ships the coordinator-served credential source: the runtime PULLS an OAuth provider's client credential (`client_id` / `client_secret`) from an operator-configured endpoint at first need, authenticated by the runtime's own service token.