Pass Supabase keys as build arguments instead of hardcoding them

Dockerfile

@@ -2,6 +2,15 @@
 FROM node:20-alpine AS frontend-builder
 WORKDIR /app/frontend
 
+# Declare build arguments (Hugging Face passes secrets as build args)
+ARG VITE_SUPABASE_URL
+ARG VITE_SUPABASE_ANON_KEY
+
+# Expose them to Vite compilation environment
+ENV VITE_SUPABASE_URL=$VITE_SUPABASE_URL
+ENV VITE_SUPABASE_ANON_KEY=$VITE_SUPABASE_ANON_KEY
+
+
 # Copy package files and install dependencies
 COPY algospaced-ui/package*.json ./
 RUN npm install

algospaced-ui/src/supabaseClient.ts

@@ -1,7 +1,7 @@
 import { createClient } from '@supabase/supabase-js';
 
-const supabaseUrl = import.meta.env.VITE_SUPABASE_URL || 'https://htbylchgqoamhcsqirun.supabase.co';
-const supabaseAnonKey = import.meta.env.VITE_SUPABASE_ANON_KEY || 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Imh0YnlsY2hncW9hbWhjc3FpcnVuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODIwMjYzNTQsImV4cCI6MjA5NzYwMjM1NH0.Ww7LBCk6rAePO_dwt4742jP9WrCRwvwg6rxj2Lwhmkk';
+const supabaseUrl = import.meta.env.VITE_SUPABASE_URL || '';
+const supabaseAnonKey = import.meta.env.VITE_SUPABASE_ANON_KEY || '';
 
 export const supabase = createClient(supabaseUrl, supabaseAnonKey);