sec: remove API key from Gradio frontend value — SEC-1 critical fix

57f29b0