A CredentialResolver that produces Azure credentials ( TokenCredential instances) from an IConfigurationSection. It dispatches on the CredentialSource value of the supplied section and recognizes the full set of Azure token-based credential sources (e.g. AzureCliCredential, ManagedIdentityCredential, EnvironmentCredential, WorkloadIdentityCredential, ChainedTokenCredential, etc.). API-key sections (CredentialSource: ApiKeyCredential) are intentionally NOT claimed by this resolver — consuming clients that accept an API key are expected to dispatch on Credential.CredentialSource themselves at construction time and read Credential.Key directly.