feat(providers): add model request transport overrides (#60200)

* feat(providers): add model request transport overrides

* chore(providers): finalize request override follow-ups

* fix(providers): narrow model request overrides

docs/reference/secretref-credential-surface.md

@@ -24,6 +24,9 @@ Scope intent:
 
 - `models.providers.*.apiKey`
 - `models.providers.*.headers.*`
+- `models.providers.*.request.auth.token`
+- `models.providers.*.request.auth.value`
+- `models.providers.*.request.headers.*`
 - `skills.entries.*.apiKey`
 - `agents.defaults.memorySearch.remote.apiKey`
 - `agents.list[].memorySearch.remote.apiKey`

docs/reference/secretref-user-supplied-credentials-matrix.json

@@ -440,6 +440,27 @@
       "secretShape": "secret_input",
       "optIn": true
     },
+    {
+      "id": "models.providers.*.request.auth.token",
+      "configFile": "openclaw.json",
+      "path": "models.providers.*.request.auth.token",
+      "secretShape": "secret_input",
+      "optIn": true
+    },
+    {
+      "id": "models.providers.*.request.auth.value",
+      "configFile": "openclaw.json",
+      "path": "models.providers.*.request.auth.value",
+      "secretShape": "secret_input",
+      "optIn": true
+    },
+    {
+      "id": "models.providers.*.request.headers.*",
+      "configFile": "openclaw.json",
+      "path": "models.providers.*.request.headers.*",
+      "secretShape": "secret_input",
+      "optIn": true
+    },
     {
       "id": "plugins.entries.brave.config.webSearch.apiKey",
       "configFile": "openclaw.json",