In @.env:
- Line 28: Move the _APP_CONSOLE_TRUSTED_PROJECTS key so it appears with the
other console-related environment variables to satisfy dotenv ordering rules;
locate the line containing
_APP_CONSOLE_TRUSTED_PROJECTS=trusted-project,another-trusted-project and
cut/paste it into the block where other console keys (e.g., keys prefixed with
_APP_CONSOLE_ or nearby console-related entries) are defined, preserving its
value and formatting.

In `@app/init/resources.php`:
- Around line 259-270: The trusted-projects parsing silently fails on entries
with whitespace; update the block that builds $trustedProjects (currently
looping over explode(',', System::getEnv('_APP_CONSOLE_TRUSTED_PROJECTS', '')))
to trim each exploded value and remove empty strings before matching against
$rule->getAttribute('projectId', ''), e.g. use array_map('trim', ...) and
array_filter(...) to produce $trustedProjects and then use in_array to set
$permitsCurrentProject; keep the existing condition that checks
!$permitsCurrentProject and !$rule->isEmpty() and the final in_array check.

In `@tests/e2e/Services/Projects/ProjectsConsoleClientTest.php`:
- Around line 5176-5181: The test testConsoleCorsWithTrustedProject currently
hard-codes $trustedProjectIds; instead, read the runtime env variable
_APP_CONSOLE_TRUSTED_PROJECTS, split it on commas, trim and filter empty values
into $trustedProjectIds, and then merge with the untrusted ID as before (use the
existing $projectIds = array_merge($trustedProjectIds,
['untrusted-project-id'])); ensure the parsing handles empty or missing env
gracefully (fall back to an empty array).
- Around line 5182-5234: The finally block unconditionally attempts to delete
the project and asserts a 204, which can mask a prior failure in setupProject;
add a guard variable (e.g., $created = false) before calling setupProject(), set
$created = true only after setupProject() succeeds (or after receiving a
successful creation response), and in the finally block only call the delete via
$this->client->call(... '/projects/' . $projectId ...) and assert the 204 when
$created is true; reference setupProject, the foreach over $projectIds, and the
delete call to locate where to add the flag and conditional cleanup.