Use GH secrets for Maps JS API key (#25)

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: mmathieum

.github/workflows/deploy.yml

@@ -32,10 +32,19 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      # TODO: Inject the API Key secret into the source file
-      # - name: Inject API Key
-      #   run: |
-      #     sed -i 's/REPLACE_WITH_MY_API_KEY/${{ secrets.MY_API_KEY }}/g' main.js
+      # Inject the API Key secret into the source file
+      - name: Inject API Key
+        env:
+          MT_MAPS_JS_API_KEY: ${{ secrets.MT_MAPS_JS_API_KEY }}
+        run: |
+          set -euo pipefail
+          if [ -z "${MT_MAPS_JS_API_KEY}" ]; then
+            echo "MT_MAPS_JS_API_KEY is not set" >&2
+            exit 1
+          fi
+          esc_key=$(printf '%s' "$MT_MAPS_JS_API_KEY" | sed -e 's/[\\/&]/\\\\&/g')
+          sed -i "s/MT_REPLACE_WITH_MAPS_JS_API_KEY/${esc_key}/g" ./index.html
+          sed -i "s/MT_REPLACE_WITH_MAPS_JS_API_KEY/${esc_key}/g" ./dev/map/empty.html
 
 
       - name: Setup Pages

dev/map/empty.html

@@ -17,7 +17,7 @@
 	</style>
 
 	<!-- This APK key is restricted to 'Maps JavaScript API' on 'mtransitapps.github.io' website: -->
-	<script type="text/javascript" src="https://maps.googleapis.com/maps/api/js?key=AIzaSyCrAHs1Dp4dgQxA0-17PJqaCfK_Jpg85Hs&libraries=maps"></script>
+	<script type="text/javascript" src="https://maps.googleapis.com/maps/api/js?key=MT_REPLACE_WITH_MAPS_JS_API_KEY&libraries=maps"></script>
 	<!-- Use demo key for local testing: https://developers.google.com/maps/documentation/javascript/demo-key -->
 	<!-- <script type="text/javascript" src="https://maps.googleapis.com/maps/api/js?key=INSERT_DEMO_KEY_HERE&libraries=maps"></script> -->
 

index.html

@@ -90,7 +90,7 @@
 	</style>
 
 	<!-- This APK key is restricted to 'Maps JavaScript API' on 'mtransitapps.github.io' website: -->
-	<script type="text/javascript" src="https://maps.googleapis.com/maps/api/js?key=AIzaSyCrAHs1Dp4dgQxA0-17PJqaCfK_Jpg85Hs&libraries=maps,marker"></script>
+	<script type="text/javascript" src="https://maps.googleapis.com/maps/api/js?key=MT_REPLACE_WITH_MAPS_JS_API_KEY&libraries=maps,marker"></script>
 	<!-- Use demo key for local testing: https://developers.google.com/maps/documentation/javascript/demo-key -->
 	<!-- <script type="text/javascript" src="https://maps.googleapis.com/maps/api/js?key=INSERT_DEMO_KEY_HERE&libraries=maps,marker"></script> -->