Clarify API proxy token protection in security architecture spec#16507

Copilot wants to merge 3 commits into

maingithub/gh-aw:mainfrom

copilot/update-security-architecture-docgithub/gh-aw:copilot/update-security-architecture-docCopy head branch name to clipboard