I assume that both the api-key in the typesense.ini file and the TYPESENSE_API_KEY key in the environment file are still valid, correct?

They are valid, but you don't want to expose this key on the frontend since it has full admin permissions. This is why you want to generate a search only api key that you can expose on the frontend