Package-level declarations

Automatic credential flows start without user intent, so failures from the credential ceremony itself are logged instead of presented. Server rejections of a credential the user selected arrive as API failures and remain presentable.