- Strip NEXT_PUBLIC_ prefix from CLOUDINARY_API_KEY and API_SECRET so
they stay server-side only and are never shipped to the browser
- Update lib/cloudinary.ts to read the renamed env vars
- Remove cloudinary-assets.json from git tracking and add to .gitignore
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>