How would you architect a secure, HIPAA-compliant generative AI chatbot for provider support at Spring Health?