fix: lock Docker dependencies and remove test credential

.gitignore

@@ -60,7 +60,6 @@ PUBLIC.md
 Thanks.md
 PUBLIC.en.md
 PR/*
-package-lock.json
 
 
 #Ignore vscode AI rules

Dockerfile

@@ -7,9 +7,9 @@ FROM base AS builder
 
 RUN apk --no-cache upgrade && apk --no-cache add python3 make g++ linux-headers
 
-COPY package.json ./
+COPY package.json package-lock.json ./
 RUN --mount=type=cache,target=/root/.npm \
-  npm install
+  npm ci
 
 COPY . ./
 ENV NEXT_TELEMETRY_DISABLED=1

scripts/test-combo-autoswitch.mjs

@@ -2,9 +2,14 @@
 // Sends text / image / search requests to a combo and reports which member ran.
 //   node scripts/test-combo-autoswitch.mjs
 const BASE = process.env.BASE_URL || "http://localhost:20127";
-const KEY = process.env.API_KEY || "sk-6581be4f05a82b6b-uxy6jn-c8190ea8";
+const KEY = process.env.API_KEY;
 const COMBO = process.env.COMBO || "haha";
 
+if (!KEY) {
+  console.error("API_KEY environment variable is required");
+  process.exit(1);
+}
+
 // 16x16 PNG (valid image so vision providers accept it).
 const PNG = "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAIAAACQkWg2AAAAFklEQVR4nGO4I2JDEmIY1TCqYfhqAAAeBCwQ8YdREQAAAABJRU5ErkJggg==";