Update Filing Controls

Flip a source's auto-file mode (the customer-facing inverse of the developer's dry-run flag).

Enforced per source, not per request: each toggle requires the developer to have both enabled the source and exposed its toggle, so a customer can never reach a knob they weren't handed — including via the raw API. Developers may flip either regardless of exposure (same knob as the developer panel).