/v1/rag/query folded the registry store's litellm_params into retrieval_config,
where the caller allowlist dropped api_key, api_base, and provider extras such
as Milvus outputFields and milvus_text_field, so a managed Milvus store 500'd
with MILVUS_API_KEY is not set while the direct search endpoint worked. The
store's params now travel as a trusted vector_store_params argument straight to
the search call, never through the completion kwargs, and the caller allowlist
stays in place.
rag_query reuses the store resolved during authorization instead of a
second registry lookup, merges registry data store-wins so callers
cannot override a managed store's provider or credentials, and logs ids
instead of the merged config, which can carry resolved credentials.
aquery forwards only allowlisted retrieval_config keys to vector store
search, keeping caller-supplied connection overrides like api_base and
api_key away from the search call
