New structure: Store API key in config folder (safer!)