Best practices for managing environment variables in Next.js, so secrets stay server-side and deployments do not freeze the wrong values at build time.