API keys, database URLs, secrets — where do they live in production? Not in your code.
Environment variables are key-value pairs that live outside your code. They're set in the shell or hosting platform.