Sibling sites of #119986's class: the openai and meta-ai image backends resolved their API key through get_secret but the base URL through os.environ, so on a multiplexed gateway a routed profile's key was sent to the launch profile's endpoint. Both fields now come from the same scope (get_secret_str, like the DeepInfra video backend after #119986).