Feature Request: support fetching content from authenticated URLs supplied in a prompt

## Problem

Prompts routinely reference documents by link — a specification, a design file, a dashboard, an internal wiki page. When the link requires authentication, the session cannot retrieve it. Anonymous links work, but internal engineering documents generally cannot be made anonymous, so the agent silently loses the most relevant context.

The failure mode is also unclear: an authorization failure, a missing connector, and an unsupported content type are not distinguishable from one another in the result.

## What is missing

- No supported mechanism for the caller to grant the session credentialed access to a referenced URL.
- No extension point for the host application to resolve a link on the session's behalf and return its content.
- No differentiated error reporting for fetch failures.

## Proposed behavior

- The host application can register a content resolver, so links matching a configured pattern are fetched by the host, using the host's own authentication, and returned to the session as context resources.
- Alternatively, the caller can supply scoped credentials for a specific host or domain.
- Fetch results are reported per link: fetched, unauthorized, unsupported type, or not attempted.
- Credentials are never exposed in prompts, model context, or logs.

## Example scenario

A prompt links to an internal specification page. The host application recognizes the domain, retrieves the content with the requesting user's authorization, and passes it to the session as a document resource.

## Acceptance criteria

- A documented extension point exists for host-mediated link resolution.
- Resolved content becomes session context with attribution to its source link.
- Failures are distinguishable by cause and surfaced to the caller.

Commencez par localiser les API du SDK liées aux sessions, aux ressources de contexte et aux points d’extension de l’hôte décrites dans l’issue. Suivez la manière dont les liens référencés et les échecs de récupération sont actuellement représentés, puis définissez le contrat du resolver, les résultats par lien, l’attribution de la source et le comportement de gestion des identifiants requis par les critères d’acceptation.

Rédigé par le modèle d'indexation à partir du texte de l'issue.