docs(models): pickle weight files are rejected by default; document trust_pickle The docs listed pytorch_model.bin (and .bin/.pt/.pth) as accepted LLM weight formats with no caveat. The runtime runs every declared weights path for a `file`-source model through reject_unsafe_weight_formats, which fails the load with UnsafePickleWeight for .bin/.pt/.pth/.ckpt unless trust_pickle is set — a parameter that was undocumented in every version despite being security-relevant. Marked those formats rejected-by-default, added the missing .ckpt extension, and documented the trust_pickle parameter. Propagated to version-2.1.x, which has both the guard and the ParameterSpec.

docs(huggingface): the v2.2.x model token is huggingface_token, and bare token never worked

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

docs(bedrock): model parameters are bedrock_-prefixed OpenAI overrides; aws_profile is embeddings-only

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

docs(google): correct false default-model claim; use current GA model in example

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Add versioned docs for v2.1 (#1903) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>