Function validate_base_url 

pub fn validate_base_url(url: &Url, allow_insecure: bool) -> Result<(), AiError>

Validate a user-supplied base URL.

Rejects:

• Non-https schemes (unless allow_insecure is set).
• URLs carrying userinfo (https://user:pw@host/...) — credentials in the URL are an antipattern.
• Placeholder hosts (example.com, example.org, *.example.com).

Mirrors rtb_vcs::http’s policy on its own base-URL fields.

Errors

AiError::InvalidConfig when any of the above checks fail.