Forward catalog static FileIO properties to server-side FileIO

[jbonofre]

IcebergCatalog.loadFileIOForTableLike only passed tableDefaultProperties (the table-default.*-prefixed subset of catalog properties) to the FileIOFactory. For S3-compatible storage configured with stsUnavailable: true, catalogs typically carry static credentials (s3.access-key-id / s3.secret-access-key) as catalog properties. These were dropped before reaching S3FileIO, which then fell back to the AWS default credentials provider chain and failed when no chain credential was available.

Merge catalogProperties as the base layer under tableProperties. DefaultFileIOFactory still overlays StorageAccessConfig last, so STS-vended subscoped credentials continue to take precedence over static catalog credentials when STS is available.

Checklist

• 🛡️ Don't disclose security issues! (contact security@apache.org)
• 🔗 Clearly explained why the changes are needed, or linked related issues: Fixes #
• 🧪 Added/updated tests with good coverage, or manually tested (and explained how)
• 💡 Added comments for complex logic
• 🧾 Updated CHANGELOG.md (if needed)
• 📚 Updated documentation in site/content/in-dev/unreleased (if needed)

[adutra]

catalogs typically carry static credentials (s3.access-key-id / s3.secret-access-key) as catalog properties.

Isn't this a bad practice? In the REST Federation doc page, we say:

Catalog properties are returned to authenticated catalog clients as part of the Iceberg REST /config response. Only place non-sensitive client configuration in catalog properties. Do not put passwords, tokens, access keys, or other secrets into catalog properties.

[dimas-b]

I agree with @adutra 's comment above that passwords should not be stored in catalog properties.

I believe general-purpose Catalog properties should probably not be forwarded to clients automatically. That will create scope confusion between the Server and the Client. If a particular property has a reason for being forwarded, it should be ok on a case-by-case basis (as for table-default.*).