chore: make allowed viewers feature flag configurable and enable it f… #3257

	# Darwin tests on runners from https://namespace.so
	name: test-namespace
	on:
	push:
	branches:
	- master
	- 'dev-gh-*' # used by developers to trigger CI runs without having to open a PR
	pull_request:
	merge_group:

	# Ensure there's only one instance of this workflow for any PR/branch/tag, and
	# cancel the previous one if necessary; except on master where we want to build
	# every commit
	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: ${{ github.ref_name != 'master' }}

	jobs:
	bazel-test-macos-apple-silicon:
	name: Bazel Test macOS Apple Silicon
	timeout-minutes: 120
	runs-on: namespace-profile-darwin # profile created in namespace console
	steps:
	- name: Set up Bazel cache
	run: \|
	# Creates a bazelrc configuration fragment which tells bazel where the cache lives.
	nsc bazel cache setup --bazelrc=/tmp/bazel-cache.bazelrc
	- uses: actions/checkout@v4

	# Build and test, excluding 'upload' jobs that are not required on macOS (used in reproducibility tests)
	- name: Test
	run: \|
	bazel \
	--noworkspace_rc \
	--bazelrc=./bazel/conf/.bazelrc.build --bazelrc=/tmp/bazel-cache.bazelrc \
	test \
	--config=ci --config=macos_ci \
	--test_tag_filters="test_macos,test_macos_slow,-upload" \
	//rs/... //publish/binaries/...

Provide feedback