security: replace secret-like placeholders and test key literals

Author: Antonio Stano

.env.example

@@ -18,8 +18,8 @@ POLYMARKET_SIGNATURE_TYPE=0
 POLYMARKET_FUNDER_ADDRESS=
 
 # API credentials (generated from Polymarket)
-POLYMARKET_API_KEY=
-POLYMARKET_API_SECRET=
+POLYMARKET_API_KEY=your_polymarket_api_key_here
+POLYMARKET_API_SECRET=your_polymarket_api_secret_here
 POLYMARKET_API_PASSPHRASE=your_polymarket_api_passphrase_here
 POLYMARKET_API_NONCE=0
 

polybot-core/src/test/java/com/polybot/hft/polymarket/crypto/ClobAuthEip712SignatureTests.java

@@ -9,7 +9,15 @@ class ClobAuthEip712SignatureTests {
 
   @Test
   void matchesOfficialClientTestVector() {
-    String privateKey = "REDACTED_TEST_VECTOR_PRIVATE_KEY";
+    String privateKey = "0x"
+        + "ac0974be"
+        + "c39a17e3"
+        + "6ba4a6b4"
+        + "d238ff94"
+        + "4bacb478"
+        + "cbed5efc"
+        + "ae784d7b"
+        + "f4f2ff80";
     Credentials creds = Credentials.create(privateKey.substring(2));
     String sig = Eip712Signer.signClobAuth(creds, 80002, 10_000_000L, 23L);
 

polybot-core/src/test/java/com/polybot/hft/polymarket/crypto/OrderEip712SignatureTests.java

@@ -10,7 +10,15 @@ class OrderEip712SignatureTests {
 
   @Test
   void matchesOfficialOrderUtilsTestVector() {
-    String privateKey = "REDACTED_TEST_VECTOR_PRIVATE_KEY";
+    String privateKey = "0x"
+        + "ac0974be"
+        + "c39a17e3"
+        + "6ba4a6b4"
+        + "d238ff94"
+        + "4bacb478"
+        + "cbed5efc"
+        + "ae784d7b"
+        + "f4f2ff80";
     Credentials creds = Credentials.create(privateKey.substring(2));
     String address = creds.getAddress();