Serve whitelisted VITE_* environment values as /vite-env.js, sourced from Laravel's cached config — no files, no .env at runtime.