Checks at compile time that credentials can actually be resolved.
Without this, a resource missing both otp_app and config_provider compiles
happily and then fails on the first API call — probably in production, since
that is where the credentials live. Catching it during compilation is much
cheaper.