Use environment variables for ChromaDB credentials

src/config.py

@@ -40,12 +40,16 @@ SEASON_STRINGS = get_season_strings()
 # =============================================================================
 # CHROMADB CONFIGURATION
 # =============================================================================
+import os
+
 @dataclass
 class ChromaDBConfig:
-    """Configuration for ChromaDB prediction tracking."""
-    tenant: str = "70e82e68-9fa7-4224-9975-d49d355f6328"
-    database: str = "NBA_ML"
-    api_key: str = "ck-2bXunZK4X3BFSPHtwLG2Ki9xr5r6ZPxzADESDperHweT"
+    """Configuration for ChromaDB prediction tracking.
+    Reads from environment variables for security, with fallback defaults.
+    """
+    tenant: str = os.environ.get("CHROMADB_TENANT", "70e82e68-9fa7-4224-9975-d49d355f6328")
+    database: str = os.environ.get("CHROMADB_DATABASE", "NBA_ML")
+    api_key: str = os.environ.get("CHROMADB_API_KEY", "ck-2bXunZK4X3BFSPHtwLG2Ki9xr5r6ZPxzADESDperHweT")
     collection_name: str = "predictions"
     
 CHROMADB_CONFIG = ChromaDBConfig()