Clearly State ENV exposure

[MentalGear]

Describe the problem

https://kit.svelte.dev/faq#env-vars
Update docs to clearly state where VITE_ envs are exposed in sveltekit. Being unsure about this may lead to poor security design.

Describe the proposed solution

A highlighted info that says: VITE_ Envs are exposed to the client ! You might want to use VITE_PUBLIC_KEY to indicate this.

Alternatives considered

No response

Importance

would make my life easier

Additional Information

No response

[luisgabrielm]

Hello @MentalGear. I agree with the need for better documentation regarding env, but there's an open discussion happening about the future of env vars in Svelte Kit: #4296

I think it might make sense to wait and see how that will play out before rewriting the docs. What do you think?

[Rich-Harris]

Closing as outdated (environment variables should now be accessed via the $env modules, not through import.meta.env)