feat(public-api): add env var and permission group controls to disable public API access (#3317)

Add DISABLE_PUBLIC_API / NEXT_PUBLIC_DISABLE_PUBLIC_API environment variables
and disablePublicApi permission group config option to allow self-hosted
deployments and enterprise admins to globally disable the public API toggle.

When disabled: the Access toggle is hidden in the Edit API Info modal,
the execute route blocks unauthenticated public access (401), and the
public-api PATCH route rejects enabling public API (403).

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

apps/docs/components/ui/icon-mapping.ts

@@ -37,8 +37,8 @@ import {
   EyeIcon,
   FirecrawlIcon,
   FirefliesIcon,
-  GitLabIcon,
   GithubIcon,
+  GitLabIcon,
   GmailIcon,
   GongIcon,
   GoogleBooksIcon,
@@ -71,9 +71,9 @@ import {
   LinearIcon,
   LinkedInIcon,
   LinkupIcon,
-  MailServerIcon,
   MailchimpIcon,
   MailgunIcon,
+  MailServerIcon,
   Mem0Icon,
   MicrosoftDataverseIcon,
   MicrosoftExcelIcon,
@@ -106,8 +106,6 @@ import {
   ResendIcon,
   RevenueCatIcon,
   S3Icon,
-  SQSIcon,
-  STTIcon,
   SalesforceIcon,
   SearchIcon,
   SendgridIcon,
@@ -119,17 +117,19 @@ import {
   SimilarwebIcon,
   SlackIcon,
   SmtpIcon,
+  SQSIcon,
   SshIcon,
+  STTIcon,
   StagehandIcon,
   StripeIcon,
   SupabaseIcon,
-  TTSIcon,
   TavilyIcon,
   TelegramIcon,
   TextractIcon,
   TinybirdIcon,
   TranslateIcon,
   TrelloIcon,
+  TTSIcon,
   TwilioIcon,
   TypeformIcon,
   UpstashIcon,
@@ -140,11 +140,11 @@ import {
   WhatsAppIcon,
   WikipediaIcon,
   WordpressIcon,
+  xIcon,
   YouTubeIcon,
   ZendeskIcon,
   ZepIcon,
   ZoomIcon,
-  xIcon,
 } from '@/components/icons'
 
 type IconComponent = ComponentType<SVGProps<SVGSVGElement>>

apps/docs/content/docs/en/tools/meta.json

@@ -145,4 +145,4 @@
     "zep",
     "zoom"
   ]
-}
+}