File-based, encrypted bundle export/import via the Central UI for promoting templates, system artifacts, and central-only configuration across environments. Site-scoped artifacts excluded. Per-artifact conflict resolution; config-only import (user redeploys via existing Deployments page). Per-entity audit rows correlated by BundleImportId.