Don't leak your env variables in Cursor

Avoid this one mistake that could expose your sensitive API keys