Least-privilege values exposed to callbacks and model plugins.

Agent/provider configuration is operational authority. Callbacks need model identity and generation settings, not API keys, HTTP clients, credential stores, process handles, callback handles, or provider-private options.