Resolve repo credentials, correctly handling repos with {:username :env/foo :password :env/bar}