SDK-93: Use HIRUNDO_API_* env vars and add deprecation fallback for legacy names

[mishana]

User description

Motivation

• Standardize configuration environment variables to HIRUNDO_API_KEY and HIRUNDO_API_HOST and provide a migration path from the legacy API_KEY/API_HOST names.

Description

• Add _get_env_with_deprecation in hirundo/_env.py to prefer HIRUNDO_API_* and fall back to API_* while emitting a DeprecationWarning when legacy names are used.
• Update API_HOST/API_KEY lookup and check_api_key message to reference the new HIRUNDO_API_* names.
• Change CLI commands in hirundo/cli.py to write HIRUNDO_API_KEY and HIRUNDO_API_HOST via upsert_env for set-api-key, change-remote, and setup flows.
• Update documentation (README.md, docs/index.rst) and example notebooks to reference HIRUNDO_API_KEY and HIRUNDO_API_HOST instead of the old names.

Testing

• No automated tests were run for this change.

---

Codex Task

---

Note

Medium Risk
Moderate risk because it changes how API credentials/host are sourced and written, which can break client configuration if users rely on the old variable names or .env contents. Backward compatibility is provided via fallback reads, but behavior now emits DeprecationWarnings.

Overview
Standardizes configuration on HIRUNDO_API_KEY/HIRUNDO_API_HOST across the SDK.

The env loader now prefers the new variable names and falls back to legacy API_KEY/API_HOST while emitting a DeprecationWarning, and the CLI setup/set-api-key/change-remote commands now write the new variable names into .env/~/.hirundo.conf. Docs and example notebooks are updated to reference the new names, and the missing-key error message now points to HIRUNDO_API_KEY.

^{Reviewed by Cursor Bugbot for commit 4f1689a. Configure here.}

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:
Standardize SDK credential sourcing by reading HIRUNDO_API_HOST/HIRUNDO_API_KEY (with _get_env_with_deprecation fallback) and adjust the hirundo.cli flows to persist the new variables along with updated user messaging. Align documentation, notebooks, and CLI guidance to mention the new env vars and upgrade dependency pins in pyproject.toml to remediate several CVEs.

Topic	Details
Dependency updates	Upgrade key tooling dependencies such as python-dotenv, requests, transformers, pytest, uv, authlib, and cryptography to their patched versions to close the listed CVEs and keep the build/test toolchain secure. Modified files (1) pyproject.toml Latest Contributors(2) User Commit Date mishana4life@gmail.com Update pyproject.toml May 04, 2026 blewis@hirundo.io SDK-87: Migrate to `uv... February 11, 2026
Other	Other files Modified files (1) uv.lock Latest Contributors(2) User Commit Date mishana4life@gmail.com SDK-93: Use stable tra... May 04, 2026 blewis@hirundo.io SDK-87: Migrate to `uv... February 11, 2026
Env config migration	Migrate configuration handling to prefer HIRUNDO_API_HOST/HIRUNDO_API_KEY, emit DeprecationWarnings when the legacy names are present, and ensure the CLI setup, set-api-key, and change-remote flows plus docs/notebooks consistently write and mention the new values so users load the correct credentials. Modified files (7) README.md docs/index.rst hirundo/_env.py hirundo/cli.py notebooks/Cancel_Dataset_QA_Run.ipynb notebooks/Hirundo_Dataset_Optimization_S3.ipynb notebooks/Hirundo_QA_Dataset_HuggingFace.ipynb Latest Contributors(2) User Commit Date mishana4life@gmail.com SDK-93: Fix duplicated... May 03, 2026 blewis@hirundo.io SDK-54: Docs update ad... February 11, 2026

This pull request is reviewed by Baz. Review like a pro on (Baz).

[benglewis]

LGTM

[benglewis]

Just a few last fixes

[benglewis]

LGTM