Design spec for moving tenant-configurable env vars into the per-port admin UI via a settings registry. Covers scope decisions, registry shape, resolver, encryption, admin UI generation, env catalog by disposition, migration plan, and testing. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>