API Keys
When to use secret keys vs publishable keys.
bs_sec_*: server-only secret key. Use withnew Buildspace(...).bs_pub_*: browser-safe publishable key. Use withcreateClient(...).
Key validation is enforced:
- Secret key passed to client SDK throws.
- Publishable key passed to server SDK throws.