Runtime configuration

Read-only — mutations stay in .env for safety.