chore(server): only enable gRPC reflection in development

Merged
MA
2d ago
+173-0

Refs PFM-7977

Summary

gRPC reflection is a convenience for local debugging tools such as grpcurl and only advertises the already-public API schema. No product client (the CLI, the web UI, or server-to-server traffic) depends on it.

This registers reflection only in development builds (Version == "dev") and disables it in production, for both the control plane and the artifact CAS. Local development is unchanged.