Forty API keys nobody pasted in a chat

The web-APIs unit needs every student to hold a working key, and the traditional distribution channel is a group chat: followed by keys in screenshots, in repos, in next semester's forked starter code. Hoody containers expose environment variables as an API: PUT each student's key into their own container's environment, one request per student, a loop for the class. The key exists where the code runs and nowhere else along the way. Revoking a leaked one is a DELETE and a re-PUT, scoped to one container, mid-semester, without an announcement.

The students call process.env exactly like the tutorial says. What changed is everything upstream of it: provisioning became infrastructure instead of copy-paste.