A Vault-issued short-lived database credential works in staging and fails in...

The credential is valid, yet the app rejects it locally because its pool layer still enforces an outdated username shape.