WebSocket realtime transport and provider routing improvements

[windsornguyen]

Add WebSocket transport layer (/v1/realtime) for bidirectional relay to upstream provider realtime APIs (e.g. OpenAI). Refactor auth to be transport-agnostic (authenticate_from_raw_key). Add model prefix and org-prefix routing to ProviderName enum for automatic provider resolution.