Honest failure cards and a service you can actually configure

Features

• Configurable service env — literals in the manifest, secrets in a dotenv
• Auto-provision a service's env_file into the isolated worktree
• teamSteer the test blueprint away from check-defining config