Parsed on first use rather than at import, because next build evaluates
server modules without the runtime secrets; failing at import would break
every build that does not carry production credentials. The parsed value is
memoized for the life of the process.
The validated server environment.