endpointLocked property
The wire serves ONLY this spec's own defaultBaseUrl: the credentials
are account-scoped (OAuth) and the endpoint dialect is not spoken by
other hosts (chatgpt-codex — the Codex Responses wire on
chatgpt.com). A persisted provider/baseUrl PAIR pointing an
endpoint-locked kind elsewhere is not servable; the boot restore
degrades the pair (loud warning + fallback) instead of refusing to
boot or mis-resolving keys (gh-760 review).
Implementation
final bool endpointLocked;