Summary

PR #22 fixed the runtime config path (deploy once, container env var per environment, no rebuild) by switching SSR reads from `import.meta.env` to `process.env`. That works in deployed prod/dev but breaks `make dummy-run`:

• Astro/Vite loads `frontend/.env` into `import.meta.env` only — `process.env` is untouched.
• `PageLayout.astro:13` reads `process.env.VITE_API_URL` → undefined locally → falls to the hardcoded prod URL.
• That prod URL gets injected into `window.API_URL` on every page.
• Browser then fetches `https://api.swissai.svc.cscs.ch\` even though `make dummy-run` is serving the API at `localhost:8080`.

(Seen on the dummy-run dashboard: DevTools shows the `/v1/models_detailed` call going to prod instead of the live-fixture-backed local API.)

Fix

Read both env sources with `process.env` first:

```js
process.env.VITE_API_URL || import.meta.env.VITE_API_URL || 'https://api.swissai.svc.cscs.ch'
```

• Deploy: `process.env` wins → runtime container injection still works exactly as PR fix VITE_URL bug not getting set #22 intended (no rebuild needed).
• Local: `process.env` is empty, `import.meta.env` picks up `VITE_API_URL=http://localhost:8080\` from `frontend/.env`.

Applied in all four call sites PR #22 touched:

• `frontend/src/layouts/PageLayout.astro:13`
• `frontend/src/pages/api_key.astro:31`
• `frontend/src/pages/leaderboard/index.astro:12` (refactored to hoist `apiUrl` into a local so it's shared with adjacent calls)
• `frontend/src/lib/config.ts:7`

Test plan

• `astro check` — 0 errors, 0 warnings (12 pre-existing hints)
• `make dummy-run` → open `http://localhost:4321/\` → DevTools Network → verify `/v1/models_detailed` request URL is `http://localhost:8080\`, returns the live-snapshot fixture
• Re-verify deployed dev/prod still works (container env var injection unchanged)

🤖 Generated with Claude Code