Environment-inventory authority for the §20 stand-in (Plan 184).
Purpose
-------
Export the tracked environment prefix list as ONE named constant from
ONE module, per spec-10 section 20.2: on landing, this export
supersedes the inline list in the spec and becomes the single source
of truth as the namespace evolves. The restore check in the runner
module consumes this object directly.
Responsibilities
----------------
- ``TRACKED_ENV_PREFIXES`` — the pinned prefixes, section 20.2 (the
live agent-prefix producers sit in the registry discovery module).
Diagnostics
-----------
Domain: OC_TESTING
Levels:
L2 — lifecycle events
L3 — semantic details
L4 — deep tracing
Contracts
---------
- The prefix rule is UNCONDITIONAL (§20.2, v0.4.1 recut): every
``OC_CHAT_*`` / ``OC_AGENT_*`` variable participates in the
restore/leak check, including prefixed security-authority variables.
The non-prefixed families (transport-trust, package-index, provider
credentials) are the M8 env-guard's jurisdiction and are OUT of this
scope — one authority per variable family.
- The constant is a tuple: immutable by construction.
Dependencies
------------
- oc_diagnostics (structured debug logging via _dbg)