--- "effect": patch --- Fix `HttpApiSecurity` bearer/http credential decoding