Rename the resolve endpoint to /enterprise/runtime/credentials/resolve and switch the request/response shape to the kind-tagged contract the enterprise AppRunner client expects. Add tool credential resolution alongside model.