API-only mode and locked design-time

[[feature:termiq-deployment-shapes|OL_NO_UI]] runs TermIQ API-only: the web UI and bundled help are not served, and /openapi stays up. OL_NO_DT locks design edits while sessions, mocks, reports, and alerts keep running. Design-time import still applies.