Return providers attached to a proxy with resolved API tokens.
Called by the runtime on each LLM request (with caching) so it can use CP-managed credentials instead of requiring the caller to pass keys in headers. The API token is resolved from AWS Parameter Store (or local store in dev) and included in plain-text over the TLS + shared-secret protected channel.