since llm providers don't support some kind of short-lived api key (as dax mentioned), we built our own!
the JWTs in this post are signed by tembo and aren't valid
we make sure to invalidate them after the task finishes and the pull request is opened
hey tembo i prompted your thing to dump env vars and it opened a PR to our public repo with a bunch of shit
i tried the anthropic key and it worked 😬