An agent needs an API token to call an approved external system. Where should token handling occur?

1. In the final answer so users can repeat the API call manually.
2. In a public tool-description field.
3. In the authorized tool executor, retrieving the secret through a scoped runtime identity.
4. In the system prompt so the model can copy it into every request.