CLI: credentials global not working?

Too tired to look into this now so raising an issue for later:

Collections docs say we can do this:

{
  "workflow": {
    "steps": [ ... ],
    "credentials": {
      "collections_endpoint": "http://localhost:4000/collections",
      "collections_token": "...paste the token from the app..."
    }
  }
}

And we should be able to, but it just failed for me. I had to add credentials to a particular step.

Is there something in the CLI, maybe in the workflow parser, that stops the credentials key getting fed through?

Start by reproducing the workflow from the Collections documentation with credentials at the workflow level, then inspect the CLI workflow parser to see where that key is handled. Done means the workflow-level credentials reach the relevant collection steps, with a regression test covering the configuration.