New environment gates must satisfy both runtime and CI ownership contracts
When adding a fail-closed environment gate, treat its configuration key and shared helper as inputs to every repository contract that inventories runtime behavior. Adding the product code, example configuration, and focused tests may still leave CI incomplete if dedicated test la…