fix(docs): address PR review comments on chat OTP cookies and MCP env var placeholders

Author: waleedlatif1

apps/docs/content/docs/en/execution/chat.mdx

@@ -143,15 +143,16 @@ curl -X POST https://sim.ai/api/chat/your-identifier/otp \
   -H "Content-Type: application/json" \
   -d '{ "email": "allowed@example.com" }'
 
-# Step 2: Verify OTP
+# Step 2: Verify OTP (save the Set-Cookie header to a cookie jar)
 curl -X PUT https://sim.ai/api/chat/your-identifier/otp \
   -H "Content-Type: application/json" \
+  -c cookies.txt \
   -d '{ "email": "allowed@example.com", "otp": "123456" }'
 
-# Step 3: Send messages (include the auth cookie from step 2)
+# Step 3: Send messages (replay the auth cookie from step 2)
 curl -X POST https://sim.ai/api/chat/your-identifier \
   -H "Content-Type: application/json" \
-  -b "chat_auth_cookie" \
+  -b cookies.txt \
   -d '{ "input": "Hello" }'
 ```
 

apps/docs/content/docs/en/mcp/deploy-workflows.mdx

@@ -118,6 +118,10 @@ Add to your VS Code MCP settings (`.vscode/mcp.json`):
   For public servers, omit the `X-API-Key` header and `--header` arguments. Public servers don't require authentication.
 </Callout>
 
+<Callout type="warn">
+  `$SIM_API_KEY` is a placeholder. For Claude Desktop and VS Code configs, replace it with your actual API key since these clients don't expand environment variables in JSON config files. Claude Code and Cursor handle variable expansion natively.
+</Callout>
+
 ## Server Management
 
 From the server detail view in **Settings → Workflow MCP Servers**, you can: