Implement enterprise-only module gating in Module Hub

registry.json supports enterprise_only flag per module but the install flow does not enforce it. Add gating: enterprise-only modules require is_enterprise() to return True, otherwise show a locked/upgrade card in the Settings hub section.