"""Configuration loaders (env-first, fail-closed)."""