Configuration precedence: the first source wins

Priority	Source	Who owns it	Typical contents
1	process environment	shell, Kubernetes, CI	Explicit one-run or deployed values
2	.env	developer/operator; gitignored	Optional sandbox credentials and local overrides
3	.devx/env	generated by the dev CLI	Local endpoints, ports, harness, session key
4	code defaults	each typed config loader	Ports, content directories, optional feature fallbacks