Adds a load-time endpoint trust check: a .prompty whose connection would send ambient credentials to an untrusted, file-chosen endpoint/tokenUrl fails with untrusted_endpoint. Trust additional origins with the trustedEndpoints load option or PROMPTY_TRUSTED_ENDPOINTS. See #590.