Both web and workflows-service load .env before .devx/env, and dotenv never overwrites an existing process
value. That makes the precedence process environment → .env → .devx/env → defaults. It is useful for deliberate
sandbox overrides, but it is also why copying .env.example wholesale is not the local setup: a blank
NAVIGATOR_ENVIRONMENT= in .env wins over the generated dev value and selects production checks. Start local
development with no .env; add only the sandbox values you actually intend to override.