[For OHCRN] Add Ability to Suppress Access to SQONs, GraphQL Playground

[b-f-chan]

As discussed with the OHCRN team with @justincorrigible, to support our launch of a non-interactive version of the OHCRN researcher portal, we require these updates in Arranger:

• Add configuration/ability to suppress access to the SQONs, such that no external client/actor can make view or query the data via the publicly deployed portal (e.g. not even via the browser dev console)
• Add configuration/ability to suppress access to the Apollo Server / GraphQL Playground (currently accessible via Researcher Portal API and should be suppressed
• Needed by Apr 30, 2026 latest

@justincorrigible please correct anything I have stated wrong or add any missing details - Thanks!

[justincorrigible]

we implemented the functionality yesterday. I'm working now on adding some test coverage to ensure it works forevermore, given the serious purpose behind this functionality. further detail:

DISABLE_FILTERS -> gives you all the data without being able to narrow in any way. responds with 400 error if you pass SQONs before even talking to ES, preventing any leakage.
DISABLE_GRAPHQL_PLAYGROUND -> takes away the Apollo UI that lets you introspect on the GQL model, run queries etc.