Set up API Key Protection

Using API keys on client side is a discouraged practice. In order to provide velocity of development, this package currently requires API keys to be passed to each hook. The Expectations from this issue is to solve for that.

Suggestions
1. One way is to use env variables.

Start by locating the hooks and entry points where API keys are currently passed, then review the repository setup to determine how configuration is handled. Define and document a secure approach that removes the need to pass keys to each hook, and verify that the hooks still work with the chosen configuration.

Written by the indexing model from the issue text.