operations: enforce community capability limits

crates/crank-registry/src/model.rs

@@ -2,9 +2,9 @@ use crank_core::{
     Agent, AgentId, AgentOperationBinding, AgentStatus, AgentVersion, AsyncJobHandle, AsyncJobId,
     AuthProfile, DescriptorId, ExecutionMode, ExportMode, InvitationToken, InvocationLevel,
     InvocationLog, InvocationSource, JobStatus, MembershipRole, Operation, OperationId,
-    OperationStatus, PlatformApiKey, Protocol, SampleId, Secret, SecretId, SecretVersion,
-    StreamSession, StreamSessionId, StreamStatus, UsagePeriod, UsageRollup, User, UserSessionId,
-    Workspace, WorkspaceId,
+    OperationSecurityLevel, OperationStatus, PlatformApiKey, Protocol, SampleId, Secret, SecretId,
+    SecretVersion, StreamSession, StreamSessionId, StreamStatus, UsagePeriod, UsageRollup, User,
+    UserSessionId, Workspace, WorkspaceId,
 };
 use crank_mapping::MappingSet;
 use crank_schema::Schema;
@@ -207,6 +207,7 @@ pub struct OperationSummary {
     pub display_name: String,
     pub category: String,
     pub protocol: Protocol,
+    pub security_level: OperationSecurityLevel,
     pub target_url: String,
     pub target_action: String,
     pub status: OperationStatus,