env: .env file for API keys (gitignored), loaded by scripts and resolve_provider; key removed from bashrc

scripts/run_bridge.sh

@@ -3,6 +3,14 @@
 # Usage: scripts/run_bridge.sh [port]   (default 8765)
 # Note: the bridge keeps running until interrupted (Ctrl-C).
 set -euo pipefail
+
+# Load API keys from the project .env file (if present)
+if [ -f .env ]; then
+  set -a
+  # shellcheck disable=SC1091
+  . ./.env
+  set +a
+fi
 cd "$(dirname "$0")/.."
 PORT="${1:-8765}"