feat: add DeepSeek and NVIDIA NIM providers

- Add deepseek and nvidia entries to gateway-provider config

- Add DEEPSEEK_API_KEY and NVIDIA_API_KEY to .env.example

- Add deepseek and nvidia to doctor's LLM provider check

- Fix remaining harness-log → log-message reference

org/security-vault.org

@@ -0,0 +1,44 @@
+#+TITLE: SKILL: Credentials Vault (org-skill-credentials-vault.org)
+#+AUTHOR: Agent
+#+FILETAGS: :system:security:vault:
+#+PROPERTY: header-args:lisp :tangle ../lisp/security-vault.lisp
+
+* Overview
+The *Credentials Vault* provides secure in-memory storage for sensitive API keys and session tokens.
+
+* Implementation
+
+** Vault Storage
+#+begin_src lisp
+(defvar *vault-memory* (make-hash-table :test 'equal)
+  "In-memory cache of sensitive credentials.")
+#+end_src
+
+** Secret Management
+#+begin_src lisp
+(defun vault-get (provider &key (type :api-key))
+  "Retrieves a credential from the vault or environment."
+  (let* ((key (format nil "~a-~a" provider type))
+         (val (gethash key *vault-memory*)))
+    (if val
+        val
+        (let ((env-var (case provider
+                          (:gemini "GEMINI_API_KEY")
+                          (:openai "OPENAI_API_KEY")
+                          (:anthropic "ANTHROPIC_API_KEY")
+                          (:openrouter "OPENROUTER_API_KEY")
+                          (otherwise nil))))
+          (when env-var (uiop:getenv env-var))))))
+
+(defun vault-set (provider secret &key (type :api-key))
+  "Stores a secret in the vault."
+  (let ((key (format nil "~a-~a" provider type)))
+    (setf (gethash key *vault-memory*) secret)))
+#+end_src
+
+** Skill Registration
+#+begin_src lisp
+(defskill :passepartout-security-vault
+  :priority 600
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))
+#+end_src