PR #309 introduced a roslyn analyzer to prevent users from using environment variables.
But besides accessing it directly from System.Environment, users may still reference configuration through other APIs such as
IConfiguration, IOptions, IOptionsSnapshot and IOptionsMonitor. We could enhance the implementation to catch those cases too.