€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs