feat(catalog): avoid static global credentials provider (#2684) (#2686)

* feat(catalog): Avoid static global credentials provider

Refactors `CredentialProviderHolder` to prevent "Connection Pool Shutdown"
errors by creating a new provider instance for each catalog.

Previously, a single static `AwsCredentialsProvider` was shared globally.
If this provider was closed, it would affect all subsequent operations.
By creating a new provider on each `create()` call from Iceberg, this
change removes the global singleton and isolates provider instances.

Fixes #2680

* Update core/src/main/java/kafka/automq/table/CredentialProviderHolder.java




* fix(credentials): update DefaultCredentialsProvider instantiation to use builder pattern

---------

Signed-off-by: Gezi-lzq <[email protected]>
Co-authored-by: Copilot <[email protected]>

Author: Gezi-lzq

core/src/main/java/kafka/automq/table/CredentialProviderHolder.java

@@ -36,18 +36,18 @@
 public class CredentialProviderHolder implements AwsCredentialsProvider {
     private static Function<BucketURI, AwsCredentialsProvider> providerSupplier = bucketURI -> newCredentialsProviderChain(
         credentialsProviders(bucketURI));
-    private static AwsCredentialsProvider provider;
+    private static BucketURI bucketURI;
 
     public static void setup(Function<BucketURI, AwsCredentialsProvider> providerSupplier) {
         CredentialProviderHolder.providerSupplier = providerSupplier;
     }
 
     public static void setup(BucketURI bucketURI) {
-        CredentialProviderHolder.provider = providerSupplier.apply(bucketURI);
+        CredentialProviderHolder.bucketURI = bucketURI;
     }
 
     private static List<AwsCredentialsProvider> credentialsProviders(BucketURI bucketURI) {
-        return List.of(new AutoMQStaticCredentialsProvider(bucketURI), DefaultCredentialsProvider.create());
+        return List.of(new AutoMQStaticCredentialsProvider(bucketURI), DefaultCredentialsProvider.builder().build());
     }
 
     private static AwsCredentialsProvider newCredentialsProviderChain(
@@ -62,7 +62,10 @@ private static AwsCredentialsProvider newCredentialsProviderChain(
 
     // iceberg will invoke create with reflection.
     public static AwsCredentialsProvider create() {
-        return provider;
+        if (bucketURI == null) {
+            throw new IllegalStateException("BucketURI must be set before calling create(). Please invoke setup(BucketURI) first.");
+        }
+        return providerSupplier.apply(bucketURI);
     }
 
     @Override