Keep API keys in server secrets
Store your Bird API key in your backend environment secrets so credentials stay out of browser bundles. Have your Bolt frontend call your own server routes, which then send email, SMS, WhatsApp, or OTP requests through Bird.