CI/CD ephemeral PR keys

GitHub Action that provisions a temporary API key per pull request
with a hard budget limit (e.g. $2), runs AI-powered tests against
the real proxy, and auto-revokes the key when the PR closes.

Useful for teams that want to test AI features in CI without
worrying about runaway costs.