Remote service secrets must reach non-interactive shells

A token exported only from an interactive shell startup file may be invisible to a remotely launched app server. Point configuration at the intended variable, remove obsolete aliases, place the export in the permission-restricted startup file used by non-interactive launches, restart the exact service processes, verify presence by variable name only, and run a required-tool session plus sandbox smoke test. Never print the value.