e251e78df9
Command providers legitimately reference their own API keys in shell templates (curl one-liners). The #70342 scrub removes ALL provider keys, which would break such setups. Add a per-provider env_passthrough list (TTS + STT) that copies named variables back from the parent env, plus docs and tests. Scrub stays the default; passthrough is explicit opt-in.