fix(ai-gateway): bypass access check for direct BYOK

[kilo-code-bot]

Summary

• Set bypassAccessCheck: true for direct BYOK provider results in get-provider.ts.
• Per apps/web/src/lib/ai-gateway/AGENTS.md, direct BYOK models must not be passed through checkOrganizationModelRestrictions since enabling them already requires explicit admin action.
• No behavior change today because the access check is currently a deny list, but this guards against future reverts.

Verification

N/A — single-line boolean flip aligning code with documented policy.

Visual Changes

N/A

Reviewer Notes

The access check is currently a deny list so this is a no-op in practice; the change exists to prevent accidental regressions if the check semantics change.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 files)

• apps/web/src/lib/ai-gateway/providers/get-provider.ts

---

_{Reviewed by gpt-5.5-20260423 · 170,629 tokens}