How to use Lovable, and when to take the code and go

Prompt in, working app out. Here is how to drive Lovable without feeding the credit meter, what the three security incidents teach, and the exit ramp the smart money takes: GitHub, then Cursor.