PLACE YOUR FIREBASE SERVICE-ACCOUNT KEY HERE.

1. Open Firebase Console -> Project Settings -> Service Accounts
2. Click "Generate new private key" -> a JSON file downloads
3. Rename it to EXACTLY:
       firebase-service-account.json
4. Upload it INTO THIS FOLDER (api/secrets/firebase-service-account.json)
5. In cPanel File Manager, right-click the file -> Change Permissions
   -> set to 0600 (owner read/write only)

The .htaccess in this folder denies all HTTP access, so the JSON file
is never reachable from the browser even if a curious user guesses
its filename.
