GHSA-8835-XMQJ-354H pgEdge Go LLM Library discloses provider API key fragments in error messages

Impact An unauthenticated caller could read part of the operator's configured LLM provider API key. The library's own health handler pings every configured provider using the operator's real credential and returns the resulting error text verbatim. Providers characteristically quote a partially...