feat(spec): every metadata.endpoints.* switch gates exactly the face its name states, and the whole-store operations get their own key `maintenance` #21945