Function describe_upstream_auth 

pub fn describe_upstream_auth(config: &HarnessConfig) -> String

How the harness authenticates to the chat upstream, for startup logs and avctl doctor — never contains key material.