Configures the organization's own LLM provider (bring-your-own gateway). Validates the configuration against the customer gateway, stores the credential encrypted, registers a wildcard deployment in LiteLLM, and persists the row. The credential is never returned.