Enable duo_cli_enabled_setting by default

Malte Heuserrequested to merge
enable-duo-cli-enabled-setting-by-default into master

What does this MR do and why?

Flips duo_cli_enabled_setting to default_enabled: true and adds the missing rollout_issue_url to its definition.

The flag gates the duo_cli_enabled admin application setting (governs Duo CLI access). It has been fully enabled in production since 2026-06-18 with no issues observed, so this is the standard "enable by default" rollout step ahead of flag cleanup. Enabling the default lets self-managed instances pick up the admin setting.

For the reviewer: single-file, low-risk change — just the YAML default flip plus a doc-only rollout_issue_url addition. No code paths change. The flag itself was introduced in !235165 (merged).

References

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports