Support Agent Key workflow LLM calls

[louis4li]

Issue

Closes #3649

Scope

• Propagate the resolved runtime NyxID credential from workflow tool context into LLMRequest.CallerContext.Credentials when the request has no caller bearer.
• Preserve durable Agent Key behavior outside LlmControl.NyxIdAccessToken, so the Agent Key remains an ephemeral runtime credential rather than persisted control context.
• Cover webhook/channel and scheduled durable Agent Key workflow LLM initial turns.

Verification

• dotnet test test/Aevatar.Workflow.Core.Tests/Aevatar.Workflow.Core.Tests.csproj --nologo --filter WorkflowRoleGAgent
• dotnet test test/Aevatar.AI.Core.Tests/Aevatar.AI.Core.Tests.csproj --nologo
• bash tools/ci/test_stability_guards.sh
• Local Telegram relay retest after PR branch deployment; not run in this step because the fix is validated at the LLM request boundary and PR CI should build first.

Notes

• This reuses the existing NyxIdLLMProvider caller-typed bearer path. No NyxID surface change is required.

Generated with Claude Code.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-16T08:10:22.713722Z	a3bd522	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a3bd522bfa

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.48%. Comparing base (ef4abec) to head (b143273).
⚠️ Report is 3 commits behind head on feature/integrate.

@@                Coverage Diff                 @@
##           feature/integrate    #3651   +/-   ##
==================================================
  Coverage              83.47%   83.48%           
==================================================
  Files                   1710     1710           
  Lines                 198032   198062   +30     
  Branches               23757    23764    +7     
==================================================
+ Hits                  165315   165345   +30     
  Misses                 21680    21680           
  Partials               11037    11037           

Flag	Coverage Δ
ci	83.48% <100.00%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
.../Aevatar.AI.Core/Chat/ChatRuntimeRequestBuilder.cs	90.33% <100.00%> (+1.07%)	⬆️

... and 2 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.