- support upsert in AddEnvironment, no-op RemoveEnvironment if absent - fallback active env to devnet on remove, add tests - integrate with sandbox create/destroy, ignore core/plans/