Env-substitute basic auth credentials for Prometheus targets

Currently the file-based SD config permits you to pass in config files, but these don't allow you to pass in basic auth credentials.

As a stop-gap we should env-subst the username and password. David Haikney raised the valid point that this doesn't scale beyond one cluster, so we may need to look into alternatives to file_sd.