first-class state/connector bindings for functions

[ashupednekar]

Summary

Add first-class state and connector bindings for functions.

Motivation

Functions often need DB/cache/queue/object-store access with scoped credentials and stable config.

Proposal

• Define binding resources (DB, Redis, queue, object store).
• Inject bindings into runtime via standard env/secret contract.
• Enforce least-privilege credentials per binding.
• Provide runtime SDK helpers for binding discovery.

Acceptance criteria

• Functions can declare required bindings declaratively.
• Runtime receives binding config consistently across languages.
• Binding access is auditable and revocable.