Never publish real API keys, private prompts, private provider URLs, or infrastructure addresses.

Use these placeholders in public files:

• https://your-gateway.com/v1
• sk-example-xxx