feat/align-litellm-contracts-cloud-20260920
master
- hermes-key-enforcement: add Model Access Tiers (local vs cloud) and cloud-scoping clause - litellm-api-keys: add Cloud Provider Consolidation section (provider map, vault secrets, access tiers) - litellm-api-keys: pin standard agent keys to explicit local-only models list; forbid {}/all-proxy-models (Community-edition cloud leak) - contract-registry: register litellm-api-keys (was unregistered drift) Additive only. Local prose-lint: PASSED.