Client Components cannot be async server fetchers; data fetching that needs secrets should stay in Server Components or Route Handlers.