The same deployment definition must target test and production with different endpoints. Which approach is appropriate?

1. Change only the bundle filename
2. Assume imports infer every missing external permission
3. Environment-specific targets or configuration with protected connection settings
4. Hardcode production credentials in every test notebook