feat: run Data on its own Google key

[EthanThatOneKid]

Data's self-hosted agent now answers with google/gemini-2.5-flash on the DATA_GEMINI_API_KEY secret, replacing the free OpenRouter handle that the shared free pool kept rate-limiting.

What changed

• lib/zo-secrets.ts — the one-off OPENROUTER_API_KEY alias becomes PROVIDER_ALIASES + applyProviderAliases, so every prefixed secret is copied onto the canonical name the Letta harness reads. Now covers DATA_GEMINI_API_KEY -> GEMINI_API_KEY.
• channels/http/index.ts — uses the table, narrows the named load to both provider key pairs, and logs which aliases it applied.
• lib/zo-secrets.test.ts — covers the alias table (copy, no-clobber, nothing-to-do).
• channels/http/README.md, services/http-api.md — record the second key and the verification.

Verification

• Bare-env start of channels/http/index.ts logged provider: exported DATA_OPENROUTER_API_KEY as OPENROUTER_API_KEY, DATA_GEMINI_API_KEY as GEMINI_API_KEY, and POST /ask answered from channels/http/index.ts with a citation.
• letta --backend local model set google/gemini-2.5-flash then model get showed the handle; a headless turn answered. google/gemini-3.5-flash on this free-tier key returns 429 at 5 requests/minute, so the agent runs google/gemini-2.5-flash.
• npm test 24 pass, npm run typecheck clean.

[wazoocomputer]

This pull request updates Data to use its own Google Gemini key, replacing the previously used OpenRouter key. This change addresses rate-limiting issues experienced with the shared free pool. The core change involves modifying how API keys are handled, specifically by introducing PROVIDER_ALIASES and applyProviderAliases to correctly map prefixed secrets to their canonical names for the Letta harness.

File Path	Change Type	Summary
channels/http/README.md	modified	Updated API key documentation
channels/http/index.ts	modified	Implemented provider alias application and logging
lib/zo-secrets.test.ts	modified	Added tests for provider alias logic
lib/zo-secrets.ts	modified	Introduced provider alias constants and application logic
services/http-api.md	modified	Updated documentation for new API key handling and verification

Reviewers, please start by examining lib/zo-secrets.ts to understand the new key aliasing mechanism.

[wazoocomputer]

This pull request updates Data to use its own Google Gemini key, replacing the previously used OpenRouter key. This change addresses rate-limiting issues experienced with the shared free pool. The core change involves modifying how API keys are handled, specifically by introducing PROVIDER_ALIASES and applyProviderAliases to correctly map prefixed secrets to their canonical names for the Letta harness.

File Path	Change Type	Summary
channels/http/README.md	modified	Updated API key documentation
channels/http/index.ts	modified	Implemented provider alias application and logging
lib/zo-secrets.test.ts	modified	Added tests for provider alias logic
lib/zo-secrets.ts	modified	Introduced provider alias constants and application logic
services/http-api.md	modified	Updated documentation for new API key handling and verification

Reviewers, please start by examining lib/zo-secrets.ts to understand the new key aliasing mechanism.