lemonaid environment-target resolver — see /api/env-target?surface=app