Block a user
docs(website): where the module state machine lives, and how boot treats it
feat(modules): installed_modules and the module state machine (phase 2, PR 1)
docs(website): the module API contract, validated by the atlas spike (phase 1)
ci: gate pull requests into main on server and client checks