Published API exposure has safer defaults

Static OpenAPI definitions for VSAM dataset APIs are now hidden unless an administrator explicitly enables them. Swagger lists the dynamic definition by default, and the static endpoints answer as unavailable while the flag is off. [[feature:vsam-dataset-view|VSAM dataset browse, layout, and API]] therefore exposes generated API metadata only when the installation chooses to publish it.