Variable CONTROL_ALLOWED_METHODS`Const`

CONTROL_ALLOWED_METHODS: readonly string[] = ...

Every LuxarApp method a controller may call.

A readonly string[] rather than a Record keeps the policy easy to audit and compare in lock tests.