Add secure admin AI provider configuration

.env.example

@@ -12,11 +12,15 @@ BOOTSTRAP_ADMIN_EMAIL=
 BOOTSTRAP_ADMIN_PASSWORD=
 # Hard safety default; this release has no delivery capability.
 AUTOMATED_OUTREACH_ENABLED=false
-# Optional criteria-first Nous Portal AI web research. The model uses strict
-# web_search/scrape_website tools through an approved Firecrawl-compatible API.
-# Only structured HTTPS targets are returned; the server crawler validates and
-# persists evidence. Both credentials are server-side only.
-# AI_RESEARCH_PROVIDER=nous_portal
+# Runtime provider configuration is managed in the authenticated admin API:
+# POST /api/v1/admin/ai-provider-config. It is stored per organization with
+# encrypted credentials in SQLite and a generated 0600 key at /data/provider-config.key.
+# On startup, a database row takes precedence over every provider environment
+# variable. Environment values are bootstrap fallback only when no DB row exists;
+# they are never copied into API responses. Connectivity tests use bounded GET
+# requests only and report outbound_calls=false (no outreach is implemented).
+# The following variables are legacy/bootstrap fallback values only.
+AI_RESEARCH_PROVIDER=
 # NOUS_MODEL=Hermes-4-405B
 # NOUS_BASE_URL=https://inference-api.nousresearch.com/v1
 # NOUS_ALLOWED_HOSTS=inference-api.nousresearch.com