Cursor wrote this for "just one quick test." The key is hardcoded
as a Python literal. If you commit and push, the key is in your
git history forever — even after you delete the line, even after
you git push --force (the rotation API logs prove it).
Fix the code to load the key from the environment via os.getenv.
In this demo the env var is set for you.
Expected output:
key starts with: sk-ant
The break is on line 5 — but read the whole snippet first.