enable dev|prod envs with simpler env vars system

frontend/src/routes/[fam]/[username]/settings/+page.svelte

@@ -1,8 +1,6 @@
 <script lang="ts">
 	import { page } from '$app/state';
 	import { enhance } from '$app/forms';
-	import { onMount, onDestroy } from 'svelte';
-	import { pb, initPbFromCookie } from '$lib/pocketbase';
 	import { famStore } from '$lib/stores/fam.svelte';
 	import { ViewHeader, CardGrid, Card, Button } from '$lib/components';
 	import { COMMON_TIMEZONES } from '../../../../../../timezone.ts';
@@ -11,8 +9,8 @@
 	let { data } = $props();
 
 	// fam is sensitive (inviteCode, stripeCustomerId, featureFlags) — never in the
-	// public famStore stream. This admin-only page subscribes to `fams` with the
-	// authenticated PB instance (pb_token cookie), page-local only.
+	// public famStore stream. It is superadmin-only, fetched server-side by the
+	// layout load. Writes go through form actions; no live fam subscription.
 	let fam = $state(data.fam);
 	let famSlug = $state(page.params.fam);
 
@@ -65,32 +63,6 @@
 	let members = $state(famStore.initialized ? famStore.members : data.members || []);
 	let deletingSeason = $state<any>(null);
 
-	function syncFamFromRecord(record: any) {
-		fam = record;
-		payday = Number(record.payday ?? 1);
-		paydayTime = record.paydayTime || '18:00';
-		timezone = record.timezone || 'auto';
-	}
-
-	onMount(async () => {
-		initPbFromCookie();
-		if (!fam?.id) return;
-		try {
-			await pb.collection('fams').subscribe(fam.id, ({ action, record }) => {
-				if (action === 'update') syncFamFromRecord(record);
-			});
-		} catch (e) {
-			console.error('fams subscribe failed:', e);
-		}
-	});
-
-	onDestroy(() => {
-		if (fam?.id)
-			pb.collection('fams')
-				.unsubscribe(fam.id)
-				.catch(() => {});
-	});
-
 	function copy(url: string) {
 		navigator.clipboard.writeText(url);
 		copied = true;