Hide the `FIREBASE_APP_API_KEY`

Some of the Firebase variables should not be public.

Instead, we can create a `.env` file with them and load it.
We can also create a `.env.example` file to show the names of variables that need to be completed.
