Infura API key is exposed

[BoxedFruits]

cfweb3/contract/hardhat.config.js

Line 22 in c4e6276

url: "https://mainnet.infura.io/v3/5707a1c75350408cb408cba40175e252",

Its probably very unlikely that the Infura account that is linked to this key is not on the free tier but on the small chance that it is, someone could use it for their own nefarious purposes.

Suggestion:
There could be added documentation for a user to set up an Infura account to get their own API key and possibly use dotenv instead to handle environment variables. Let me know what y'all think and I could open up a PR :)

[MachineITSvcs]

From my testing, dotenv variables, even when using the REACT_APP_ prefix, are not hidden/secure when using Cloudflare Pages. I assume this is a limitation of Cloudflare Pages.