Do not commit API keys.

Use environment variables in external applications:

export LBIT_API_KEY="lbit_sk_..."

If a key is exposed, revoke it through the private key-management process and generate a new one.

The public API client does not contain the private parser, registry, prompts, or server deployment configuration.