Use HttpApi for Environment APIs & standardize authn/authz (#2858)

Co-authored-by: codex <codex@users.noreply.github.com>