Tie model routing to available credentials

A neat refinement: route work to providers the user can actually pay for. For background tasks (title generation, lightweight extraction), pick the cheapest model of whichever provider the user has a key for, falling back to the operator default. The credential resolution and the model-tiering strategy (Chapter 4) thus work together: "use the cheapest available model of an available provider."