In both local developent, and production. Also, vendor the `envsubst` binary from https://github.com/a8m/envsubst, as it supports default values, which the gnu envsubst (from gettext-base) does not.