KB / Memory / tech-single-source-env
Single-source env config
One committed non-secret env file feeds client build and server runtime
Dual sources (hand-maintained wrangler vars vs Vite VITE_*) drift silently. Canonical names → derive client + deploy targets.
Secrets never in committed env files. Related: tech-one-codebase-oss-saas, feedback-public-kb-only.