API key stored in plaintext config.json — use Windows Credential Manager

[SirYadav1]

The API key for AI features is stored in plaintext in config.json (ui_main.py:660, config.py:61-62). Anyone with filesystem access can read it. Consider using the keyring library to store credentials in Windows Credential Manager.

Additionally:

• logger.py:12 uses mode=w which overwrites logs each run (should be mode=a)
• build_release.py:106-111 writes spec file twice
• models.py:23-28 MovePlan dataclass is dead code