* feat: OnDeleteCatalog Delete managed creds (creds we rotated previously) when a host catalog is deleted