BYOK model

Provider keys are read locally by the CLI and runner. EvalKit does not proxy model calls.

evalkit run @evalkit/pii-detection --model anthropic/claude-sonnet-4-6