feat(03-04): add CodeWhisperer, Replit AI, Codestral, watsonx, Oracle AI providers

- Codestral with low-confidence 32-char generic pattern + high entropy
- watsonx with IBM IAM token endpoint for verification
- CodeWhisperer, Replit AI, Oracle AI as keyword-only
- Completes PROV-07 (10 Tier 7 code/dev tools providers)

pkg/providers/definitions/codestral.yaml

@@ -0,0 +1,21 @@
+format_version: 1
+name: codestral
+display_name: Codestral (Mistral Code)
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "codestral"
+  - "CODESTRAL_API_KEY"
+  - "codestral.mistral.ai"
+  - "codestral-latest"
+patterns:
+  - regex: '[a-zA-Z0-9]{32}'
+    entropy_min: 4.5
+    confidence: low
+verify:
+  method: GET
+  url: https://codestral.mistral.ai/v1/models
+  headers:
+    Authorization: "Bearer {KEY}"
+  valid_status: [200]
+  invalid_status: [401, 403]

pkg/providers/definitions/codewhisperer.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: codewhisperer
+display_name: Amazon CodeWhisperer / Q Developer
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "codewhisperer"
+  - "q-developer"
+  - "amazonq"
+  - "codewhisperer.us-east-1.amazonaws.com"
+  - "CODEWHISPERER_PROFILE_ARN"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

pkg/providers/definitions/oracle-ai.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: oracle-ai
+display_name: Oracle Generative AI
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "oci-genai"
+  - "oracle-genai"
+  - "OCI_GENAI"
+  - "generativeai.oci.oraclecloud.com"
+  - "oraclecloud.com"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

pkg/providers/definitions/replit-ai.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: replit-ai
+display_name: Replit AI (Ghostwriter)
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "replit"
+  - "ghostwriter"
+  - "REPLIT_TOKEN"
+  - "REPLIT_DB_URL"
+  - "replit.com"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

pkg/providers/definitions/watsonx.yaml

@@ -0,0 +1,18 @@
+format_version: 1
+name: watsonx
+display_name: IBM watsonx
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "watsonx"
+  - "WATSONX_API_KEY"
+  - "WATSONX_PROJECT_ID"
+  - "IBM_CLOUD_API_KEY"
+  - "us-south.ml.cloud.ibm.com"
+  - "watsonx.ai"
+verify:
+  method: POST
+  url: https://iam.cloud.ibm.com/identity/token
+  headers: {}
+  valid_status: [200]
+  invalid_status: [400, 401]

providers/codestral.yaml

@@ -0,0 +1,21 @@
+format_version: 1
+name: codestral
+display_name: Codestral (Mistral Code)
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "codestral"
+  - "CODESTRAL_API_KEY"
+  - "codestral.mistral.ai"
+  - "codestral-latest"
+patterns:
+  - regex: '[a-zA-Z0-9]{32}'
+    entropy_min: 4.5
+    confidence: low
+verify:
+  method: GET
+  url: https://codestral.mistral.ai/v1/models
+  headers:
+    Authorization: "Bearer {KEY}"
+  valid_status: [200]
+  invalid_status: [401, 403]

providers/codewhisperer.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: codewhisperer
+display_name: Amazon CodeWhisperer / Q Developer
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "codewhisperer"
+  - "q-developer"
+  - "amazonq"
+  - "codewhisperer.us-east-1.amazonaws.com"
+  - "CODEWHISPERER_PROFILE_ARN"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

providers/oracle-ai.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: oracle-ai
+display_name: Oracle Generative AI
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "oci-genai"
+  - "oracle-genai"
+  - "OCI_GENAI"
+  - "generativeai.oci.oraclecloud.com"
+  - "oraclecloud.com"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

providers/replit-ai.yaml

@@ -0,0 +1,17 @@
+format_version: 1
+name: replit-ai
+display_name: Replit AI (Ghostwriter)
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "replit"
+  - "ghostwriter"
+  - "REPLIT_TOKEN"
+  - "REPLIT_DB_URL"
+  - "replit.com"
+verify:
+  method: GET
+  url: ""
+  headers: {}
+  valid_status: []
+  invalid_status: []

providers/watsonx.yaml

@@ -0,0 +1,18 @@
+format_version: 1
+name: watsonx
+display_name: IBM watsonx
+tier: 7
+last_verified: "2026-04-05"
+keywords:
+  - "watsonx"
+  - "WATSONX_API_KEY"
+  - "WATSONX_PROJECT_ID"
+  - "IBM_CLOUD_API_KEY"
+  - "us-south.ml.cloud.ibm.com"
+  - "watsonx.ai"
+verify:
+  method: POST
+  url: https://iam.cloud.ibm.com/identity/token
+  headers: {}
+  valid_status: [200]
+  invalid_status: [400, 401]