enable_all_extensions: provide secure(r) api-key hand-off

[ethanmsl]

convert api-key intake to either use .env or interactive intake that isn't part of shell command history.

This is principally a security vulnerability for remote work. But common location of command history also makes it a slightly raised vulnerability for local work.

This is not an emergency security flaw, but it is counter to best practices for cli key handoff.

(^ NOTE: the displayed keys are deleted keys.)