- Added API_KEYS env var to router service in docker-compose.yml - Replaced hardcoded agent keys in router.py fallback with dev-only placeholder - Production now loads keys from environment, not source code - Resolves the final remaining item from CT116 security deep-dive Co-authored-by: Abiba via Kwame