- Split extension release builds from web env loading. - Add a release secret guard for extension packaging. - Keep web and extension Vite configs from leaking incompatible env.