fix: fail closed backend capabilities and isolate gate smoke

src/routes/assets/+page.server.ts

@@ -1,3 +1,13 @@
 import type { PageServerLoad } from './$types';
 import { assetReport, session } from '$lib/server/application';
-export const load: PageServerLoad = async (event) => ({ result: await assetReport((await session(event))?.userId ?? null, 'asset_search') });
+import { configuration } from '$lib/server/config';
+import { capabilityDisabledReason, capabilityEnabled } from '$lib/server/release-gate';
+export const load: PageServerLoad = async (event) => {
+  const config = configuration();
+  for (const capability of ['asset_search', 'asset_valuation'] as const) {
+    if (!capabilityEnabled(capability, config.capabilityAllowlist)) {
+      return { result: { status: 'unavailable' as const, reason: capabilityDisabledReason(capability) } };
+    }
+  }
+  return { result: await assetReport((await session(event))?.userId ?? null, 'asset_search') };
+};