kempnerforge.metrics.mlflow.auth

Databricks auth for MLflow: the environment the SDK and artifact clients read.

Credentials are never read here: the Databricks SDK resolves them from the environment, a ~/.databrickscfg profile or OAuth. The training backend and the eval publisher both prepare the process environment through _prepare_databricks_auth, so they authenticate alike.