OpenRouter S3 observability now requires an external ID in the IAM trust policy (October 28, 2026) | Wirestack