The service picks its provider key by environment: APP_ENV
decides whether the dev or prod key loads. Fill in the dict method
that reads APP_ENV and falls back to "dev" when it's unset —
the safe default, so a misconfigured box burns the cheap key, not
the prod one.
Method: env.