/** Gates webhooks, self-serve API keys, and BYOK AI provider keys.
 * Admin-granted only for now (users.isDeveloper, toggled in
 * admin/users/[id]) — kept as a single function so a future
 * subscription-based auto-grant (e.g. `|| tier !== "free"`) is a one-line
 * change here, not a redesign across every call site. */
export function hasDeveloperAccess(user: { isDeveloper: boolean }): boolean {
  return user.isDeveloper;
}