Keeping API Keys Secure with Env Vars

Never hardcode LLM API keys — load them from environment variables to keep secrets out of your source code.