licensing: enforce repository permissions
Created by: unknwon
This PR:
- Adds
SRC_ENFORCE_TIERS
env var, see docstring for detailed explanation. - Guards write paths of permissions with license check: GraphQL endpoints for explicit permissions and PermsSyncer for mirroring permissions.
Fixes #14025