fix(gateway): reject keyless HEADER auth_mechanism at admission and in looper (#11120)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 121
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-2b4c651a27238a14ac7bd03ba582183d14f9622bdb5ea292c2cea97acc4c727e.yml
-openapi_spec_hash: 8a933236116d07c8a060b6eadd205feb
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai/runloop-f8c19bf9329a554bedfbb8678d6d3cb8881a285d27b3d8ba078e2a573b597a17.yml
+openapi_spec_hash: 0c3d490050a9bbaa5cb7378bf55e8f37
 config_hash: 7afcebea2dd638ed0cf0d5367f820f73

src/runloop_api_client/types/shared/auth_mechanism.py

@@ -19,4 +19,7 @@ class AuthMechanism(BaseModel):
     """
 
     key: Optional[str] = None
-    """Only valid for 'header' type: the header name (e.g., 'x-api-key')."""
+    """The header name (e.g., 'x-api-key').
+
+    Required for 'header' type; invalid for other types.
+    """

src/runloop_api_client/types/shared_params/auth_mechanism.py

@@ -20,4 +20,7 @@ class AuthMechanism(TypedDict, total=False):
     """
 
     key: Optional[str]
-    """Only valid for 'header' type: the header name (e.g., 'x-api-key')."""
+    """The header name (e.g., 'x-api-key').
+
+    Required for 'header' type; invalid for other types.
+    """