Merge PR #22 after review: keeps the API key prompt script static and passes prompt, command path, and provider as shell positional arguments. Verified together with PR #27 via make check in an isolated worktree.