From HIGH to Clean: Removing a Hardcoded HMAC Key in AI-Generated Python

The model wrote what you asked for. The prompt said "include a usable example so I can run it" — and the model gave you one, complete with SECRET_KEY = "s3cr3t-signing-key-change-me" hardcoded in sour