Security foundations and routing guardrails.

Separate credentials, scope virtual keys, trace requests, and audit usage without exposing upstream secrets.