This is most likely possible, however, have I missed what for what reason your credits would be deducted exactly? I like the idea of having FB interactive with SF, I can see more things in the future to promote it. But I don't understand yet what you are planning to do/why credits have to be deducted in a FB page

Don't get me wrong though, I do wish to help in whatever way I can, just that the nexus is very delicate right now so I have to tread lightly on it

Edit: Actually, I am worried about giving out the user/pass stuff in general like that. Reason being, is that facebook apps lately have been a huge issue with user/passwords being stolen from other games using a application to store/log information since you are going through 'facebook' to the nexus, unless you have a better idea, not sure if you can 'embed' (like a stupid iframe or something similar) a page so that nothing is 'taken' and that myself and others would feel secure about it. Just need to make sure the safety of everyone here, you know?
Understandable concerns, and the Nexus updating can certainly wait. As I said, I have nothing beyond a few ideas right now and ultimately nothing may come of it.
So let me just address those questions:
1) Why deduct credits?
Right now I'm still wondering that myself. At the most abstract level, SFCredits would be used to buy items, upgrades and bonuses (much like Farmville and it's ilk get people to spend real money for in-game items). So if a player wants to do better in the FB game, they play the "real" Stellar Frontier and rack up some credits. Does that make sense?
2) How will the Nexus information be secured?
A fine question. I've always counted security as my highest priority and certainly when integrating with a third-party such as yourself I've been considering options. My main idea is just have the players log-in to Nexus every session. Much like when you log-in to any website, take the players Nexus user name and password and store it in a SESSION variable and use that to query Nexus. That way the passwords are never stored permanently, nor could they be gleaned via an SQL injection or other database hack.
If you feel strongly enough about this, we could even have a go at setting up a 3D Secure style iFrame to process the whole transaction on the Nexus server. As above, I'd be happy to help develop this. I work for an eCommerce company so I know how these things work
