Scope object store credentials to execution payloads and selected authorities in the native Delta scan #5659

What is the problem the feature request solves?

Follow-up from the native Delta Lake scan review (#5365). The planning payload for the native Delta scan retains object store options selected by provider-wide prefixes. Extracting credentials during execution payload construction, after final file selection, and including only the authorities required by the selected data files and DV locations would reduce credential retention and payload content.

Tests should verify that planning payloads contain no credentials, execution payloads contain only the selected scopes, and credentials for external DV locations remain available.

Describe the potential solution

No response

Additional context

Raised in the #5365 review discussion. No leak was demonstrated; this is contract hardening.