I built a small API gateway for Chinese AI models (DeepSeek, etc.) and decided to audit my own token...