aibridge: implement selective request decryption #1182
Description
Only certain domains should be decrypted, so that the proxy can be used at the workspace level without inadvertently intercepting requests it shouldn't.
Acceptance criteria:
- List should be updatable without needing a new coder build + upgrade cycle
- List of allowlisted domains defined for each supported
aibridge.Provider - Must support multiple values
- Must support regex
- Must be configurable in normal coder/coder config values (i.e.
CODER_AIBRIDGE_ANTHROPIC_PROXY_DOMAIN_ALLOWLIST=api.anthropic.com) - Must be hidden by default
- Has tests