"Invalid API key" or undefined env vars on Vercel: how to fix it

Works locally, but on Vercel you get 'Invalid API key' or undefined environment variables? How Vercel env vars work and how to fix them.