Coding agents leak whatever credentials sit in their environment. Here's how to give an agent API access through a proxy, so it never holds the key.