GitHub caught 39M leaked secrets in 2024. Here's how I store API keys on my Mac: Keychain, 1Password CLI references, and direnv -- no plaintext .env files.