d4e0df1e8d
_to_async_client rebuilds default_headers from scratch and dropped the blank Authorization set by _create_openai_client, so every async aux call (the path aux tasks actually take) for a free-tier OpenCode model still shipped the keyless placeholder as a bearer and 401'd. Re-apply the same keyless policy on the async twin. Review finding: fourth client builder (_to_async_client) missed the keyless header policy.