Secrets Management for Student Projects: API Keys Should Not Live in Git
A secret is different from ordinary configuration because disclosure can grant access. The engineering goal is to keep secrets out of source control and minimize their blast radius.