Refresh Vuforia credentials and Model Target scopes - #3451

What changed

• replace the suspended CI credential set used by TestSuccess
• refresh Model Target OAuth credentials in all encrypted CI secret files
• request standard, advanced, state-based, and advanced state-based Model Target scopes when generating credentials
• update the current iCloud ci_secrets working copy to the same complete schema

Why

CI slot 1 returned Vuforia 403 ProjectSuspended, blocking every open PR. The previous generator also requested only the standard Model Target scope, which blocks advanced and state-based verified-fake coverage.

Validation

• decrypted and schema-checked all 100 encrypted secret files (21 required fields; none missing or empty)
• obtained a fresh OAuth token from real Vuforia
• confirmed standard and advanced dataset routes reach request validation rather than invalid_scope
• ran tests/mock_vws/test_query.py::TestSuccess: 21 passed, including real Vuforia
• repository pre-commit and pre-push hooks passed