Introduce import-guarded environment roots and retire temporary bootstrap and POC provisioning after ownership transfer.