Five API Calls From a Free Account: How Lovable Exposed Every Project Built Before November 2025