memento-cloudflare

The `test-vector-http.js` file contains hardcoded `VOYAGE_API_KEY` and `NEO4J_AUTH` credentials, which is a critical security vulnerability as it exposes sensitive production-like secrets directly in the codebase. While the main worker (`src/index.ts`) is configured to use environment variables (a good practice), the presence of these secrets in the repository significantly lowers its security posture. The worker's current `fetch` handler only returns static metadata, making it safe as deployed. However, the comments indicate future plans to expose the full tool capabilities, which would require robust OAuth (mentioned as 'next') to prevent unauthorized database access and API usage. Cypher queries are parameterized, mitigating direct SQL/Cypher injection.