Idea: As a failsafe, the Development tables could include something to distinguish them from the Production tables. Likewise for the two Dev and Prod Server Modules apps.
Thus, if any app’s configuration gets screwed up – so that dev-only or production-only code is being called in the wrong setting – then this would make it possible it to check, before anything too embarrassing occurs.
I know, configuration errors never happen in practice 
, so there’s never any value in automating any safety checks…