AI Fix Prompts for Off Day

Fix a hardcoded credential in repository 'zizicici__Off-Day'.

**Issue**: Hard-coded api_key found (Vault Token)
**File**: Off Day/PublicPlan/PublicPlanDetailViewController.swift
**Line**: 200
**Severity**: CRITICAL

**Current code around the issue:**
```
     195 |                 var content = UIListContentConfiguration.valueCell()
     196 |                 content.text = item.name
     197 |                 content.secondaryText = item.date.completeFormatString()
     198 |                 content.textToSecondaryTextVerticalPadding = 6.0
     199 |                 content.textProperties.color = item.type == .offDay ? AppColor.offDay : AppColor.workDay
>>>  200 |                 content.textProperties.adjustsFontSizeToFitWidth = true
     201 |                 content.textProperties.minimumScaleFactor = 0.5
     202 |                 content.secondaryTextProperties.color = AppColor.text
     203 |                 content.secondaryTextProperties.font = UIFont.monospacedDigitSystemFont(ofSize: 15, weight: .regular)
     204 |                 content.secondaryTextProperties.adjustsFontSizeToFitWidth = true
     205 |                 content.secondaryTextProperties.minimumScaleFactor = 0.5
```

**Required fix:**
1. Remove the hardcoded credential from the source code
2. Replace it with an environment variable read: `os.environ.get('API_KEY_KEY')` (Python) or `process.env.API_KEY_KEY` (JS)
3. Add the variable name to a `.env.example` file with a placeholder value
4. Ensure `.env` is in `.gitignore`
5. If this credential was ever committed to git, it should be considered compromised and rotated

**Do NOT:**
- Move the secret to a config file that gets committed
- Use a default fallback value that is a real credential
- Leave the old credential in a comment

Fix a hardcoded credential in repository 'zizicici__Off-Day'.

**Issue**: Hard-coded api_key found (Vault Token)
**File**: Off Day/PublicPlan/PublicPlanDetailViewController.swift
**Line**: 204
**Severity**: CRITICAL

**Current code around the issue:**
```
     199 |                 content.textProperties.color = item.type == .offDay ? AppColor.offDay : AppColor.workDay
     200 |                 content.textProperties.adjustsFontSizeToFitWidth = true
     201 |                 content.textProperties.minimumScaleFactor = 0.5
     202 |                 content.secondaryTextProperties.color = AppColor.text
     203 |                 content.secondaryTextProperties.font = UIFont.monospacedDigitSystemFont(ofSize: 15, weight: .regular)
>>>  204 |                 content.secondaryTextProperties.adjustsFontSizeToFitWidth = true
     205 |                 content.secondaryTextProperties.minimumScaleFactor = 0.5
     206 |                 var layoutMargins = content.directionalLayoutMargins
     207 |                 layoutMargins.top = 16.0
     208 |                 layoutMargins.bottom = 16.0
     209 |                 content.directionalLayoutMargins = layoutMargins
```

**Required fix:**
1. Remove the hardcoded credential from the source code
2. Replace it with an environment variable read: `os.environ.get('API_KEY_KEY')` (Python) or `process.env.API_KEY_KEY` (JS)
3. Add the variable name to a `.env.example` file with a placeholder value
4. Ensure `.env` is in `.gitignore`
5. If this credential was ever committed to git, it should be considered compromised and rotated

**Do NOT:**
- Move the secret to a config file that gets committed
- Use a default fallback value that is a real credential
- Leave the old credential in a comment

Address OWASP A02 (Cryptographic Failures) compliance gap in 'zizicici__Off-Day'.

**OWASP Category**: A02 -- Cryptographic Failures
**Fix guidance**: Remove hardcoded secrets, use strong encryption (AES-256-GCM), enforce TLS, never store passwords in plaintext (use bcrypt/argon2).

**Steps:**
1. Identify all code paths related to cryptographic failures
2. Apply the fixes described above
3. Add automated tests to verify the fix
4. Document any security assumptions in code comments

Address OWASP A07 (Auth Failures) compliance gap in 'zizicici__Off-Day'.

**OWASP Category**: A07 -- Auth Failures
**Fix guidance**: Implement proper session management, use MFA where possible, enforce strong passwords, protect against brute force.

**Steps:**
1. Identify all code paths related to auth failures
2. Apply the fixes described above
3. Add automated tests to verify the fix
4. Document any security assumptions in code comments

Repository 'zizicici__Off-Day' is failing the quality gate.

Failed conditions:
- overall_score: actual 0.0 >= 50 (FAILED)
- security_score: actual 0.0 >= 40 (FAILED)
- critical_credentials: actual 2.0 <= 0 (FAILED)

Fix each failing condition to make the repo pass the quality gate.

Repository 'zizicici__Off-Day' has 2 open issues:

- [CRITICAL] Hard-coded api_key: Vault Token (Off Day/PublicPlan/PublicPlanDetailViewController.swift)
- [CRITICAL] Hard-coded api_key: Vault Token (Off Day/PublicPlan/PublicPlanDetailViewController.swift)

Resolve each issue. For security issues, apply the appropriate fix. For quality issues, refactor the affected code.