API Keys

LLM provider credentials stored as Opaque Secrets with an Authorization entry, consumed by Backend auth (spec.policies.auth.secretRef)