Effective gate state: the global flag OR this service's own flag.
The global read happens even when serviceId is unset. A process with no
MAINTENANCE_SERVICE_ID has no per-service flag to check and no registry
entry for an operator to toggle — it is exactly the process the global
switch exists for, so it must not short-circuit to false.
Both reads share one 5s cache window and one round trip.
A stale cache races the refresh against GATE_MAX_BLOCK_MS rather
than awaiting it outright — see that constant for why a gate on the
onRequest path must not be allowed to block without a ceiling.
Admin read of the global kill-switch. Uncached — operators need truth.
Staticfor
Throttled (>=30s), best-effort, non-blocking refresh of this runner.