feat(discovery): trust only handlerReady/available services (ADR-0076 D12) (#2637)

Framework discovery now reports honest capability markers
(__serviceInfo: status + handlerReady, framework#2462). Consumers that
gated UI on services.<x>.enabled alone would light up for dev stubs
whose routes 404/501.

- data-objectstack: add DiscoveryServiceInfo type + isServiceUsable()
  predicate — enabled && (handlerReady ?? status === 'available').
  Degraded services with a live handler stay usable; stubs do not.
- react useDiscovery: isAuthEnabled / isAiEnabled now use the predicate
  (auth stays fail-open when the discovery entry is absent).
- app-shell ConditionalAuthWrapper: same predicate for the auth gate.
- console useApiDiscovery: replace ad-hoc enabled/handler check with
  the shared predicate so degraded to unusable services stop rendering
  endpoint groups.
- tests: table-driven unit coverage for isServiceUsable.


Claude-Session: https://claude.ai/code/session_01A1BtxNeUaGmvUYr8FwtUNu

Co-authored-by: Claude <noreply@anthropic.com>

Author: os-zhuang

apps/console/src/pages/developer/hooks/useApiDiscovery.ts

@@ -8,6 +8,7 @@
 
 import { useState, useEffect, useCallback } from 'react';
 import { useAdapter } from '@object-ui/app-shell';
+import { isServiceUsable, type DiscoveryServiceStatus } from '@object-ui/react';
 
 export type HttpMethod = 'GET' | 'POST' | 'PATCH' | 'DELETE' | 'PUT';
 
@@ -204,15 +205,18 @@ export function useApiDiscovery() {
       const serviceEndpoints: EndpointDef[] = [];
       for (const [serviceName, catalog] of Object.entries(SERVICE_ENDPOINT_CATALOG)) {
         const serviceInfo = discoveredServices[serviceName] as
-          | { enabled: boolean; status?: string; handlerReady?: boolean; route?: string }
+          | (DiscoveryServiceStatus & { route?: string })
           | undefined;
-        const isEnabled = serviceInfo?.enabled ?? false;
-        const hasHandler = serviceInfo?.handlerReady
-          ?? (serviceInfo?.status === 'available' || serviceInfo?.status === 'degraded');
+        // ADR-0076 D12 (framework#2462): gate on the shared honest-capability
+        // check — `stub`/`unavailable`/`handlerReady:false` entries must not
+        // render endpoint groups (`degraded` still serves and stays visible).
+        // Services absent from discovery keep the historical fail-closed
+        // behavior of this page: no entry → no endpoint group.
+        const usable = serviceInfo ? isServiceUsable(serviceInfo) : false;
         const routePrefix = serviceInfo?.route
           ?? discoveredRoutes[serviceName]
           ?? catalog.defaultRoute;
-        if (isEnabled && hasHandler) {
+        if (usable) {
           serviceEndpoints.push(...buildServiceEndpoints(serviceName, routePrefix));
         }
       }