Duo Workflow should be resilient against LLM provider outages

Problem

Our LLM provider is a single point of failure for Duo Workflow.

Solution

We should investigate if we can fallback to a different model and possibility different provider if there is an outage. We could use a kind of automatic circuit breaker pattern for this.