Add credential isolation as to not include the provided Credentials in the LLM-Prompt

[JoelSass]

Credentials provided via the config YAML file are currently embedded into the LLM prompt text, such that the credentials are transmitted to the LLM API.

The sdkEnv mechanism should be utilized in order to include envvars and replace them locally rather than sending the credentials plainly to the provider.