Security: keep API keys out of process list via --env-file, harden env validation#91

laiso merged 4 commits intomainlaiso/ts-bench:mainfrom

copilot/add-gitignore-and-env-filelaiso/ts-bench:copilot/add-gitignore-and-env-fileCopy head branch name to clipboard