audit: find env/export as a full word, not as a prefix

Closes #27219.