Keep AI Keys Out of Code—and Trace What Fails in Production