Added
- Write-only API key field in Web Settings: configure online vision without opening the credential file; saved values are never returned to the browser.
Changed
- Credential reference name moved into Advanced settings; browser credential writes are protected by same-origin, Settings revision, and active-reference checks.