ARK_SEEDREAM_API_KEY paired with ARK_SEEDREAM_API_BASE_URL/ARK_API_BASE_URL
means requests go to a host-side proxy gateway holding the real ark key;
the injected credential is an opaque router token that need not start with
'ark-'. Skip the format check in that case and pass it through as-is.
Interactive/default flows keep the strict ark- validation.