Cleaner (ENV-based) API credential handling