LLM Gateway

Model routing, virtual keys and spend for BeConfident's LLM traffic.

Only @beconfident.app accounts are allowed. The domain is enforced server-side before a session is issued.