Contributes to https://gitlab.com/gitlab-org/gitlab/-/issues/347562

**Problem**

We ignore raw credentials from URL if credentials are explicitly
provided as a hash to UrlSantizer.new(url, credentials: { user:
<user>, password: <password> }).

**Solution**

Collect credentials from both URL and credentials hash. Values from
credentials hash have preference.

Changelog: fixed