Azure's Weakest Link? How API Connections Spill Secrets