CMIS compliance fixture integration and optional OpenCMIS TCK harness boundary

examples/cmis/capability-fixtures.json

@@ -12,7 +12,7 @@
       "binding": "browser",
       "mutations": false,
       "visibility": ["public", "internal"],
-      "deny": ["confidential"],
+      "deny": ["confidential", "restricted"],
       "expected_tck_posture": "repository/type/read/navigation/query/content-read subset"
     },
     "governed-authoring": {
@@ -20,14 +20,14 @@
       "binding": "browser",
       "mutations": true,
       "visibility": ["public", "internal"],
-      "deny": ["confidential"],
+      "deny": ["confidential", "restricted"],
       "expected_tck_posture": "readonly subset plus selected create/update/delete checks"
     },
     "admin-export": {
       "description": "Service-account export profile for broad governance inspection.",
       "binding": "browser",
       "mutations": false,
-      "visibility": ["public", "internal", "confidential"],
+      "visibility": ["public", "internal", "confidential", "restricted"],
       "deny": [],
       "expected_tck_posture": "internal contract tests, not general client compatibility"
     },
@@ -36,7 +36,7 @@
       "binding": "browser",
       "mutations": true,
       "visibility": ["public", "internal"],
-      "deny": ["confidential"],
+      "deny": ["confidential", "restricted"],
       "expected_tck_posture": "selected OpenCMIS TCK Browser Binding subset"
     }
   },
@@ -200,4 +200,3 @@
     }
   }
 }
-