Manage project-credentials via provisioning API

[midigofrank]

Description

• This PR adds support for creating project_credentials via the CLI deploy command.
• It closes Allow deploy to manage credential associations for jobs in lightning #2367
• On project export, (cli pull) it will provide a list of credentials that are available within a given project
• On project deploy it will allow you to create project_credentials (if you own those credentials) and associate them with jobs.
• It does not yet support deleting project_credentials via cli deploy - this is something that we do want to do, but will handle in another issue. (Support project-credential deletion via provisioning controller #2382)

Validation steps

1. (How can a reviewer validate your work?)

Additional notes for the reviewer

1. (Is there anything else the reviewer should know or look out for?)

Pre-submission checklist

• I have performed a self-review of my code.
• I have implemented and tested all related authorization policies. (e.g., :owner, :admin, :editor, :viewer)
• I have updated the changelog.

[taylordowns2000]

when merging this, please merge OpenFn/docs#533

[taylordowns2000]

@christad92 and @stuartc , this is ready to go. note that the integration tests will not pass until OpenFn/kit#743 is merged and released.

(This poses a tricky co-dependency, cc @josephjclark .)

Note that the full feature here is represented by:

1. This PR here Manage project-credentials via provisioning API #2372
2. This PR in kit Support credentials in deploy package kit#743
3. And this PR in docs Showcase support for file paths in project-spec.yaml docs#533

I'll send the branches and testing instructions to MSF now and we may have feedback on how they want this to work, but the big picture is satisfied and we can now set up a full, running Lightning instance via shell script!

git clone msf-openfn-lime-iraq
docker compose blah blah
docker exec -it <BLAH> -- /app/bin/lightning eval Lightning.SetupUtils.setup_user(%{first_name: "Michel", last_name: "B", email: "blah@geneva.msf.org", password: "passwordFromVault"}, "apiTokenFromVault", [%{name: "openmrs", schema: "raw", body: %{"a" => "secret"}}, %{ name: "dhis2", schema: "raw", body: %{“username” => “admin”, "password" => "passwordFromVault"}}])
openfn deploy projectIraq.yaml

It's pretty rad 😄

[christad92]

Great work! Love it

[stuartc]

@taylordowns2000 on you to test deletion 👍

[codecov]

Codecov Report

Attention: Patch coverage is 95.83333% with 2 lines in your changes missing coverage. Please review.

Project coverage is 89.85%. Comparing base (4ee43fa) to head (9b0f095).
Report is 5 commits behind head on main.

Files	Patch %	Lines
lib/lightning/projects/provisioner.ex	90.90%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2372      +/-   ##
==========================================
+ Coverage   89.83%   89.85%   +0.02%     
==========================================
  Files         305      305              
  Lines       10455    10497      +42     
==========================================
+ Hits         9392     9432      +40     
- Misses       1063     1065       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.