security: remove all hardcoded API keys, require from environment

scripts/testing/register_test_clients.py

@@ -8,7 +8,7 @@ import json
 # Configuration
 COORDINATOR_URL = "http://127.0.0.1:8000/v1"
 CLIENT_KEY = "test_client_key_123"
-MINER_KEY = "REDACTED_MINER_KEY"
+MINER_KEY = "${MINER_API_KEY}"
 
 async def register_client():
     """Register a test client"""

scripts/testing/test_payment_integration.py

@@ -18,7 +18,7 @@ logger = logging.getLogger(__name__)
 # Configuration
 COORDINATOR_URL = "https://aitbc.bubuit.net/api"
 CLIENT_KEY = "test_client_key_123"
-MINER_KEY = "REDACTED_MINER_KEY"
+MINER_KEY = "${MINER_API_KEY}"
 
 class PaymentIntegrationTest:
     def __init__(self):

scripts/testing/test_payment_local.py

@@ -17,8 +17,8 @@ logger = logging.getLogger(__name__)
 
 # Configuration - Using localhost as we're testing from the server
 COORDINATOR_URL = "http://127.0.0.1:8000/v1"
-CLIENT_KEY = "REDACTED_CLIENT_KEY"
-MINER_KEY = "REDACTED_MINER_KEY"
+CLIENT_KEY = "${CLIENT_API_KEY}"
+MINER_KEY = "${MINER_API_KEY}"
 
 class PaymentIntegrationTest:
     def __init__(self):