Wrap credentials with the secrecy crate

[gtema]

To prevent accidental logging/tracing of the secrets (token, password, application credential secret) we should wrap them with the secrecy crate like in the rust sdk

[gtema]

currently at least the password is passed through the chain as a plain string