This test build has working server-side demo credentials. For a real client, replace them with Cloudflare encrypted environment secrets before launch.