Allows enterprise on-prem deployments to disable the "public" webapp
access-mode choice in the console UI via an opt-out env var (default
true). The flag is env-driven only, with no enterprise-server round
trip, and existing apps already set to public keep displaying that
mode; only future selection is blocked.