.env file validator

Syntax and duplicate-key checks only. Nothing is uploaded — stay in the browser.