explicitly pass credentials to registry calls

This will be a new major version when published.

Part of the process of removing any implicit dependencies between `npm-registry-client` and npm's own configuration. Instead of using `{get,set}CredentialsByURI`, explicitly pass the credentials in when necessary.

/cc @iarna for review (still WIP)