redis: add credentials provider option and built-in Entra ID auth

[cosmin-staicu]

Adds support for runtime-rotated Redis credentials to GetRedisClient, with two entry points: a vendor-neutral WithStreamingCredentialsProvider option and a config-driven azure_entra flag for Microsoft Entra ID. Backwards compatible — existing callers and YAML are unaffected.

GetRedisClient currently only accepts a static Username/Password. That doesn't work with managed Redis offerings that authenticate via short-lived identity tokens — Azure Managed Redis and Redis Enterprise Cloud issue Microsoft Entra ID tokens that expire (~1h) and must be refreshed and re-AUTH'd on the live connection before they lapse.

With only static credentials, a long-running deployment gets disconnected when the token expires. It's worst for the coordination bus that LiveKit relies on: managed Redis evicts pub/sub connections when their token expires, and under RESP2 a pub/sub socket can't process an out-of-band AUTH, so it must reconnect with a fresh token. Every component that builds its client through protocol — server, sip, egress, ingress — is affected.

go-redis already supports this through StreamingCredentialsProvider (≥ v9.6; this module is on v9.20.0), and Redis publishes an official extension, go-redis-entraid, that implements

[changeset-bot]

⚠️ No Changeset found

Latest commit: 63e17d0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[CLAassistant]

All committers have signed the CLA.