The cli option '-ai-api-key' isn't working for me (gosec 2.22.3, macOS). Setting via environment (e.g., export GOSEC_AI_API_KEY=Secret) works.