Hacker News Reader

Without looking closer I just assumed it was trivially extracted from the frontend.

You're right, it's the Supabase's anonymous API key they send with each anonymous request.