Replace workflow's `:config-auth` with a `:credential-fn`

As discussed in #10.