cloud: one-line keys only, a refused pick keeps the chat's model

key_cmd's first line is the key, as pass stores it; anything else with
whitespace would reach the Authorization header, and http.client's
refusal quotes the whole value into the log and the socket. A pick that
cannot be asked is refused before it replaces the chat's model. Titles
and writes no longer move the context meter, a provider's error body
has the key masked, and an empty cloud model id is refused.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

0 files changed, 0 insertions, 0 deletions