[eshulman2]

Summary

• add an openai-compatible model backend for orchestration and sandbox agents
• support multiple named endpoints with per-connection base_url and environment-backed api_key_env credentials
• keep credential values out of model policy, traces, task files, and logs
• support unauthenticated endpoints and legacy OPENAI_BASE_URL / OPENAI_API_KEY configuration
• document configuration and add Chat Completions/tool-calling contract coverage

Testing

• uv run pytest tests/unit -q (2202 passed)
• Ruff checks for all changed Python files
• git diff --check

[eshulman2]

P1 — prevent the legacy key from reaching an unauthenticated named endpoint. When a named openai-compatible connection omits api_key_env, its callers pass None here. If OPENAI_API_KEY is also set for legacy use, this returns that real credential and the agent/sandbox sends it as Bearer auth to the named connection's base_url. The documented no-key configuration should resolve to an empty/placeholder key; restrict this fallback to the legacy single-connection path.