pub fn transcript_env(session_id: &str) -> Vec<(String, String)>
Model-visible env overlay. Secret-shaped keys are omitted, not redacted in place.