Answer
Rather than trying to reference the separate user and password fields from script, consider pre-building the complete Basic-Auth header value itself (the already-encoded "AuthHeader" string) and storing that single combined value in IFS REST Task Configurations, then referencing that one pre-built value directly from the workflow — this sidesteps needing the inline script to assemble the header from two separate externalized values.