- Strip NEXT_PUBLIC_ prefix from CLOUDINARY_API_KEY and API_SECRET so they stay server-side only and are never shipped to the browser - Update lib/cloudinary.ts to read the renamed env vars - Remove cloudinary-assets.json from git tracking and add to .gitignore Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>