v0.1.5

What's changed

• Bind resolved provider credentials to their effective API origin.
• Restrict usage checks and model probes to same-origin endpoints.
• Reject redirects on authenticated requests to prevent credential forwarding.
• Add regression coverage for custom proxies, foreign model endpoints, ambiguous provider origins, and redirects.

Full Changelog: v0.1.4...v0.1.5