How to Replace API Token When Pushing to Production?

Hello Team,

I am new to Monday.com development and currently working on an app that interacts with the Monday API. During development, I am using a personal API token, but I want to ensure that when I push my app to the production environment, I replace it correctly with a secure and appropriate token.

What is the best practice for handling API tokens in a production environment? Should I use OAuth or a different method to authenticate API requests when my app is live?

Any guidance on securely managing tokens in Monday.com apps would be greatly appreciated.

Thanks in advance!