Removes the organization's own LLM provider: deregisters the LiteLLM deployment, deletes the stored credential, then deletes the row. Order matters: a failure never leaves a live deployment with no record of it. Idempotent.