Fail closed when Launchplane override payloads are required

[cbusillo]

Summary

• add Launchplane required-payload flags for Odoo instance overrides and website bootstrap
• enforce those flags in startup and data workflow paths, including update-only data workflows
• pass the new flags through devkit runtime env generation and document the runtime contract

Tests

• uv run python -m unittest tests.test_odoo_website_bootstrap tests.test_docker_script_override_guards tests.test_odoo_data_workflows tests.test_runtime
• uv run ruff format --check docker/scripts/odoo_website_bootstrap.py docker/scripts/run_odoo_startup.py docker/scripts/run_odoo_data_workflows.py odoo_devkit/local_runtime.py tests/test_odoo_website_bootstrap.py tests/test_docker_script_override_guards.py tests/test_odoo_data_workflows.py tests/test_runtime.py
• uv run ruff check --diff docker/scripts/odoo_website_bootstrap.py docker/scripts/run_odoo_startup.py docker/scripts/run_odoo_data_workflows.py odoo_devkit/local_runtime.py tests/test_odoo_website_bootstrap.py tests/test_docker_script_override_guards.py tests/test_odoo_data_workflows.py tests/test_runtime.py
• uv run ruff check docker/scripts/odoo_website_bootstrap.py docker/scripts/run_odoo_startup.py docker/scripts/run_odoo_data_workflows.py odoo_devkit/local_runtime.py tests/test_odoo_website_bootstrap.py tests/test_docker_script_override_guards.py tests/test_odoo_data_workflows.py tests/test_runtime.py

Notes

Pairs with the Launchplane runtime env handoff PR so shared/prod Odoo web containers receive the typed override payload and the runtime fails closed if it is missing.