feat(spec,auth): guard that every feature-gated capability is UI-gated (#2874)

feat(spec,auth): guard that every feature-gated capability is UI-gated (#2874) #8536