fallback to reading API key from ENV for deploy hooks