Extend the new cloud_auto_credentials option so that the GCS backend can fetch service-account or metadata credentials (not just AWS chains).