Policy-driven OpenAI-compatible routing proxy for OpenClaw that picks the lowest-cost model, adds safety gates, and can escalate once.