IAV-1331/feat(credentials): remove allowedDomains & allowedHttpRequestDomains fields from credentials UI form

Summary

Hides allowedDomains and allowedHttpRequestDomains fields from the credentials form UI. These attributes are now managed server-side and should no longer be exposed to or editable by the user.

Changes

• Excluded allowedDomains and allowedHttpRequestDomains from the rendered credentials form fields

Why

These fields are security-sensitive and must be controlled by the backend only. Exposing them in the UI introduces risk of misconfiguration.

Testing

• Open any credential form — fields must not appear
• Verify no regression on other credential fields rendering

Closes IAV-1390