Credential-less auth should be explicit opt-in

[timkelty]

Currently "credential-less" auth is triggered by having an empty key or secret: https://github.com/craftcms/aws-s3/blob/main/src/Fs.php#L437-L472

A better/safer approach would be to have an explicit option whether or not to use credentials.