The researcher who found the exposed key said it “raises questions” about how DOGE handles sensitive data.