T3 Env: validate and separate environment variables

T3 Env validates configuration with a schema and separates server variables from client variables. It makes missing configuration easier to detect and helps prevent accidental browser exposure.