Nest api config (baseUrl + baseUrlRoot) so dev cross-origin /i requests work without a separate app-env flag.
Flatten share/API config keys, nest validation limits only, and move the HTTP client to plugins/axios.