fix(bedrock): key client cache on full credential, not just access key id

A corrected secret under the same access key id would otherwise keep serving the
stale cached client until TTL/eviction. Caught by Cursor Bugbot.

Author: waleedlatif1

apps/sim/providers/bedrock/index.ts

@@ -139,8 +139,14 @@ export const bedrockProvider: ProviderConfig = {
       }
     }
 
+    // Key on the full credential (access key id + secret) so a corrected secret
+    // under the same access key id yields a fresh client rather than a stale one.
+    const credentialKey =
+      request.bedrockAccessKeyId && request.bedrockSecretKey
+        ? `${request.bedrockAccessKeyId}:${request.bedrockSecretKey}`
+        : 'default-chain'
     const client = getCachedProviderClient(
-      `bedrock::${region}::${request.bedrockAccessKeyId ?? 'default-chain'}`,
+      `bedrock::${region}::${credentialKey}`,
       () => new BedrockRuntimeClient(clientConfig)
     )