fix(credentials): replay remembered refusals as credential errors, derive the delegable Google services list, and correct a fallback TSDoc

fix(credentials): replay remembered refusals as credential errors, derive the delegable Google services list, and correct a fallback TSDoc #4570