The sandbox had BRAVE_API_KEY set, causing the env override to win over the config file value in the test assertion.