Ollama and Fly.io keep model API keys out of agent sandboxes with a credential-injecting gateway · Polylog