Mask wandb API key in initial_config.yaml to prevent saving to disk

- Added API key masking for _initial_config alongside existing config masking
- Previously only training_config.yaml had the API key masked, but initial_config.yaml retained it
- Added test to verify API key is masked in both config files saved to disk

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: gitttt-1234

sleap_nn/training/model_trainer.py

@@ -720,7 +720,10 @@ def _setup_loggers_callbacks(self, viz_train_dataset, viz_val_dataset):
             loggers.append(wandb_logger)
 
             # save the configs as yaml in the checkpoint dir
+            # Mask API key in both configs to prevent saving to disk
             self.config.trainer_config.wandb.api_key = ""
+            if self._initial_config is not None:
+                self._initial_config.trainer_config.wandb.api_key = ""
 
         # zmq callbacks
         if self.config.trainer_config.zmq.controller_port is not None:

tests/training/test_model_trainer.py

@@ -381,6 +381,12 @@ def test_model_trainer_centered_instance(caplog, config, tmp_path: str):
     assert training_config.data_config.skeletons
     assert training_config.data_config.preprocessing.crop_size == 104
 
+    # Verify API key is also masked in initial_config.yaml
+    initial_config = OmegaConf.load(
+        f"{model_trainer.config.trainer_config.ckpt_dir}/{model_trainer.config.trainer_config.run_name}/initial_config.yaml"
+    )
+    assert initial_config.trainer_config.wandb.api_key == ""
+
     checkpoint = torch.load(
         (
             Path(model_trainer.config.trainer_config.ckpt_dir)