Private AI chat

This surface is locked to a single approved account. Provider keys stay server-side and the chat endpoint rejects unauthenticated requests.