Resolve the target application first and carry applicationId. Resolve environmentId as well for environment-scoped secrets, integrations, and configuration.
Keep survey definitions application-scoped. Do not mix shared commercial entitlement logic or human identity authority into survey configuration.