Keys were removed from .env.development but remain in git history. OpenAI, Gemini, Replicate, and Supabase keys need rotation. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>