The Cloudflare Workers env record, which is the only way bindings and
variables reach a Worker — there is no ambient process.env on the edge.
Pass the env the platform provides, typically
import { env } from 'cloudflare:workers'. Only its string entries
become IRuntimeServices.env; object bindings (KV, R2, D1, …)
are reached through CAPABILITIES.CLOUDFLARE instead, because
IRuntimeServices.env is contracted as a string record.
Ignored on Deno, Node, and Bun, which read their own ambient environment.