The runtime_provider origin cases (http:// and :8443 on the bound host get nothing, :443 still
gets the bound key) become rows of test_openai_key_bound_to_another_host_never_reaches_openrouter
instead of a third test, keeping the stack at two new tests. The http and :8443 rows fail on base.
test_cached_client_carries_only_the_live_main_credential asserted only that the third client
was not one of the earlier keys, which passes for any wrong value. It now names what it expects:
the placeholder for a keyless explicit endpoint, no client for the runtime-endpoint shape once
the runtime is keyless.