fix(api-proxy): strip all Gemini auth query param variants to prevent API_KEY_INVALID#2182

lpcox merged 3 commits intomaingithub/gh-aw-firewall:mainfrom

copilot/awf-api-proxy-fix-key-injectiongithub/gh-aw-firewall:copilot/awf-api-proxy-fix-key-injectionCopy head branch name to clipboard