Fix the unintentional CredProvider replace.

As Benjamin spotted, the HttpClientBuilder#setDefaultCredentialsProvider
method silently replaced any previously set provider.

This also happened in case when remote but also proxy needed
credentials. In worst case, the provider would be replaced 3
times (remote authc + HTTP + HTTPS proxy).

Added Javadoc warning about this, and also added
a new Builder method that delegates to it's own instance
of CredentialsProvider that if used, will replace the
HttpClientBuilder.

Added UT verifying the change.

CI
https://bamboo.zion.sonatype.com/browse/NX-OSSF21