feat: add isolated release gates and CI checks

src/routes/api/sync/+server.ts

@@ -2,9 +2,14 @@ import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
 import { session, synchronize } from '$lib/server/application';
 import { protectMutation } from '$lib/server/http';
+import { capabilityDisabledReason, capabilityEnabled } from '$lib/server/release-gate';
+import { configuration } from '$lib/server/config';
 export const POST: RequestHandler = async (event) => {
   const current = await session(event);
   protectMutation(event, `sync:${current?.userId ?? event.getClientAddress()}`, 6);
+  if (!capabilityEnabled('asset_sync', configuration().capabilityAllowlist)) {
+    return json({ error: capabilityDisabledReason('asset_sync') }, { status: 503 });
+  }
   if (!current) return json({ error: 'Connect an EVE character first.' }, { status: 401 });
   try {
     const result = await synchronize(current.userId);