App details can be accessed in the DOM

[ypantig]

Describe the bug
The app details are exposed in the DOM, which can be a security concern. These details include sensitive details like the API key and app ID.

Our website was assessed for security risks, and the exposed keys were flagged.

[tw2113]

Based on what I'm seeing at https://support.algolia.com/hc/en-us/articles/18966776061329-Can-the-search-API-key-be-public, the Search API key is meant to be public. Probably the same for the application ID, at least when it comes to things like Instantsearch and client configuration there