[测试、性能、安全、验收与归档]：完成全量测试验收与 OpenSpec 归档，包含 CLI 验收、NewAPI smoke、安全扫描和主 spec 更新

src/owner_voice_pet/config.py

@@ -12,10 +12,11 @@ class AppConfig:
     wake_word: str = "小杰小杰"
     sample_rate: int = 16000
     channels: int = 1
-    llm_base_url: str = "https://api.openai.com"
+    llm_base_url: str = "https://newapi.mkbk.shop"
     llm_api_key: str | None = None
-    llm_model: str = "gpt-4o-mini"
+    llm_model: str = "gpt-5.4-mini"
     llm_api_style: str = "chat_completions"
+    llm_stream: bool = True
     audio_input_device: str | None = None
     audio_output_device: str | None = None
     asset_dir: Path = Path("assets/pet")
@@ -33,10 +34,11 @@ class AppConfig:
             wake_word=get("WAKE_WORD", "小杰小杰") or "小杰小杰",
             sample_rate=int(get("SAMPLE_RATE", "16000") or "16000"),
             channels=int(get("CHANNELS", "1") or "1"),
-            llm_base_url=(get("LLM_BASE_URL", "https://api.openai.com") or "").rstrip("/"),
+            llm_base_url=(get("LLM_BASE_URL", "https://newapi.mkbk.shop") or "").rstrip("/"),
             llm_api_key=get("LLM_API_KEY"),
-            llm_model=get("LLM_MODEL", "gpt-4o-mini") or "gpt-4o-mini",
+            llm_model=get("LLM_MODEL", "gpt-5.4-mini") or "gpt-5.4-mini",
             llm_api_style=get("LLM_API_STYLE", "chat_completions") or "chat_completions",
+            llm_stream=(get("LLM_STREAM", "1") or "1").lower() not in {"0", "false", "no"},
             audio_input_device=get("AUDIO_INPUT_DEVICE"),
             audio_output_device=get("AUDIO_OUTPUT_DEVICE"),
             asset_dir=Path(get("ASSET_DIR", "assets/pet") or "assets/pet"),
@@ -87,4 +89,14 @@ class AppConfig:
                     "startup",
                 )
             )
+        if not self.llm_base_url.startswith(("http://", "https://")):
+            errors.append(
+                ProviderError(
+                    ErrorCode.CONFIG_MISSING_VALUE,
+                    "OWNER_LLM_BASE_URL must start with http:// or https://",
+                    False,
+                    "config",
+                    "startup",
+                )
+            )
         return errors