pub const PUBLIC_ENV_PREFIXES: &[&str];Expand description
Env var-name prefixes that frameworks inline into the client bundle by
convention. A read of one of these is normal and safe, so it does NOT count
as a secret source (issue #890). Shared by the extract layer (so public env
vars never become source signals) and the bespoke client-server-leak rule.