feat(forms): gate Form A production embedding

www/.env.example

@@ -5,10 +5,13 @@ PUBLIC_COUNTERS_MOCK_RESULT=success
 PUBLIC_AIA_FORMS_MODE=off
 PUBLIC_AIA_FORMS_LIVE_APPROVED=false
 PUBLIC_AIA_FORMS_MOCK_RESULT=success
-# The real Form A adapter is test-only. All three gates below are required;
-# indexing-enabled builds always fail closed even when they are set.
+# Isolated-test Form A requires this environment role and approval; it remains
+# unavailable in indexing-enabled builds even when both are set.
 PUBLIC_AIA_FORMS_ENVIRONMENT=local
 PUBLIC_AIA_FORMS_ISOLATED_TEST_APPROVED=false
+# Form A production additionally requires mode=live, LIVE_APPROVED=true and
+# environment=production. PUBLIC_ALLOW_INDEXING never authorizes a form.
+PUBLIC_AIA_FORM_A_PRODUCTION_APPROVED=false
 # Explicit, local-only Form A meeting preview; requires PUBLIC_AIA_FORMS_MODE=mock.
 PUBLIC_AIA_FORM_A_PREVIEW=false
 PUBLIC_ALLOW_INDEXING=false