May this caller auto-update the CLI from the next channel?

The @mnemom/mnemom CLI's prerelease-channel gate. The CLI's background updater calls it when update.channel = next. Entitled when the caller's email is in the internal cohort (@mnemom.ai), the caller is Mnemom staff, or the caller's own account or any org they belong to holds a product_access_grant for product cli_next or code (Mnemom Code invites install the CLI from @next; typically from a redeemed invitation, POST /v1/invites/accept). Not being entitled is a normal 200 with next: false and a hint; the CLI then updates from latest. This is a soft gate: the next dist-tag is public on npm, and the gate only decides who the CLI auto-updates onto it. A lookup failure is 503 (retryable), never a silent deny.