fix: inject TESTUDO_API_KEY and TESTUDO_API_URL into extension build

The extension bundle did not replace process.env.TESTUDO_API_KEY
because rolldown's define block was missing it. Also, E2E CI was
defaulting to the production API URL because TESTUDO_API_URL was
not set at build time.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Lykhoyda

.github/workflows/e2e.yml

@@ -65,6 +65,7 @@ jobs:
 
       - name: Build extension
         env:
+          TESTUDO_API_URL: http://localhost:3001
           TESTUDO_API_KEY: e2e-test-key
         run: yarn workspace @testudo/extension run build
 
@@ -143,6 +144,7 @@ jobs:
 
       - name: Build extension
         env:
+          TESTUDO_API_URL: http://localhost:3001
           TESTUDO_API_KEY: e2e-test-key
         run: yarn workspace @testudo/extension run build
 

packages/extension/rolldown.config.ts

@@ -26,7 +26,9 @@ for (const file of readdirSync(fontsSrc)) {
 console.log('Copied manifest.json, popup.html, options.html, blocked.html, and fonts/ to dist/');
 
 const apiUrl = process.env.TESTUDO_API_URL || 'https://testudo-api-production.up.railway.app';
+const apiKey = process.env.TESTUDO_API_KEY || '';
 console.log(`[Testudo Build] API URL: ${apiUrl}`);
+console.log(`[Testudo Build] API Key: ${apiKey ? '[SET]' : '[NOT SET]'}`);
 
 const shared = {
 	output: {
@@ -37,6 +39,7 @@ const shared = {
 	},
 	define: {
 		'process.env.TESTUDO_API_URL': JSON.stringify(apiUrl),
+		'process.env.TESTUDO_API_KEY': JSON.stringify(apiKey),
 	},
 	transform: {
 		jsx: { mode: 'automatic' as const, importSource: 'preact' },