_setTestVertexTokenProvider safety

Never set _setTestVertexTokenProvider() in production. The seam exists only so Vertex routing, worker, and warmer tests avoid real Google Cloud ADC; tests must reset it with _setTestVertexTokenProvider(null) so production behavior returns to real credential discovery.