fix(security): remove remaining insecure configuration defaults

Objective

Identify and remove insecure configuration that could impact production usage.

Scope

- Review secrets handling
- Review environment variables
- Review default credentials
- Review exposed configuration values

Acceptance Criteria

- No known insecure defaults remain
- Secrets are externalized where appropriate
- Configuration is documented
- Security-related tests continue to pass