Summary

This PR includes two focused fixes that should be generally useful upstream:

1. Support Redis TLS deployments that use private or self-signed certificates.
2. Route Bedrock compatibility requests through the Bedrock runtime path instead of the generic Anthropic/OpenAI forwarders.

Changes

Redis TLS

• Add redis.tls_skip_verify configuration support.
• Wire the option into the Redis TLS client config.
• Expose the setting in setup and deployment examples.
• Update Redis setup/config tests for the new field.

This is useful for private deployments where Redis is served over TLS with an internal CA or a self-signed certificate.

Bedrock compatibility routing

• Add Bedrock compatibility request handling for chat completions and responses forwarding.
• Preserve Bedrock-specific model/provider routing when requests enter through compatibility endpoints.
• Add tests covering Bedrock compat request behavior.

This prevents Bedrock accounts from being incorrectly routed through non-Bedrock upstream paths when using compat endpoints.

Tests

go test ./internal/repository ./internal/service -run 'Test.*Redis|Test.*Bedrock|Bedrock|Redis'
git diff --check upstream/main..HEAD