fix(protocol-matrix): restore live probe auth header

scripts/acceptance/verify_host_protocol_matrix.sh

@@ -181,7 +181,7 @@ def run_capture(url: str, api_key: str, method: str, request_headers_path: pathl
         "--retry-delay",
         str(RETRY_DELAY),
         "-H",
-        "Authorization: Bearer ***",
+        f"Authorization: Bearer {api_key}",
         "-H",
         f"X-Hermes-Debug-Request-Headers: {request_headers_path}",
     ]

scripts/test/test_host_protocol_matrix_script.sh

@@ -67,6 +67,7 @@ body_file=""
 url=""
 request_headers_file=""
 request_body=""
+auth_header=""
 prev=""
 log_file="${FAKE_CURL_LOG:-}"
 for arg in "$@"; do
@@ -87,7 +88,9 @@ for arg in "$@"; do
       continue
       ;;
     -H)
-      if [[ "$arg" == X-Hermes-Debug-Request-Headers:* ]]; then
+      if [[ "$arg" == Authorization:* ]]; then
+        auth_header="$arg"
+      elif [[ "$arg" == X-Hermes-Debug-Request-Headers:* ]]; then
         request_headers_file="${arg#X-Hermes-Debug-Request-Headers: }"
       fi
       prev=""
@@ -115,6 +118,20 @@ if [[ -n "$request_headers_file" ]]; then
   printf 'Authorization: Bearer ***\n' > "$request_headers_file"
   printf 'Content-Type: application/json\n' >> "$request_headers_file"
 fi
+case "$url" in
+  https://kimi.example.com/*)
+    [[ "$auth_header" == 'Authorization: Bearer kimi-key' ]] || {
+      echo "unexpected auth header for kimi: $auth_header" >&2
+      exit 1
+    }
+    ;;
+  https://timeout.example.com/*)
+    [[ "$auth_header" == 'Authorization: Bearer timeout-key' ]] || {
+      echo "unexpected auth header for timeout provider: $auth_header" >&2
+      exit 1
+    }
+    ;;
+esac
 case "$url" in
   https://kimi.example.com/v1/models)
     printf 'HTTP/1.1 200 OK\nContent-Type: application/json\n' > "$headers_file"