Hard Coded API Key?

[AdamGoyer]

The key AIzaSyC_pzrI0AjEDXDYcg7kkq3uQEjnXV50pBM is:

• A Google API key (the "AIza" prefix is standard for Google Cloud Platform keys)
• Hardcoded in the source at internal/auth/refresh.go:24
• Used for Google's Signaler API at signaler-pa.clients6.google.com

[pmocek]

As of today, at least two different secret values are hard-coded:

$ grep -r  AIza
internal/auth/auth.go:	req.Header.Add("x-goog-api-key", "AIzaSyDRYGVeXVJ5EQwWNjBORFQdrgzjbGsEYg0")
internal/auth/refresh.go:	SignalerAPIKey = "AIzaSyC_pzrI0AjEDXDYcg7kkq3uQEjnXV50pBM"