Also, would be great to add an example of local dev and production deployment with sensitive environment variables like API keys. That's been annoyingly tough to find best practices for.