feat(cloaking): add env-guard hook closing the unimported-.env bootstrap gap (#234)