The AI section - a facade, not a store.
The values live in ai.db behind the AI worker, and the secrets live in the OS vault behind koru-ai-provider. Both authorities are unchanged. This type is the shape the facade presents; the mapping onto the worker is the Gateway's, because the worker handle is the Gateway's.
A secret never appears here, in either direction. The only thing said about the OpenAI key is whether one is configured.
Read tolerantly, as [GlobalSettings] is - and so are its two provider parts: an unknown field is ignored on the read; the [AiPatch] that writes it refuses one.
