feat: add durable addressed registry publication

harness/tht/cli/schema_cmd.py

@@ -16,6 +16,12 @@ from tht.mschema.eligibility import classify_all
 schema_app = typer.Typer(help="Gestione mschema (rappresentazione canonica dello schema)")
 logger = logging.getLogger(__name__)
 
+def _require_writer_capability() -> None:
+    import os
+    if os.environ.get("THOTH_WORKSPACE_CAPABILITY_REQUIRED") == "1":
+        from tht.workspace_writer_lock import require_workspace_writer_capability
+        require_workspace_writer_capability()
+
 
 def _add_examples(dwh, phys, examples) -> None:
     for table_name, table in phys.tables.items():
@@ -54,6 +60,7 @@ def annotations_path(cfg: Config) -> Path:
 
 
 def refresh_catalog(cfg, *, dwh=None, output_path: Path | None = None):
+    _require_writer_capability()
     """Run the existing catalog algorithm and persist its canonical output."""
     target = dwh if dwh is not None else build_dwh(cfg)
     physical = target.introspect()