Add an independent switch for profiling endpoints

[tylercreller]

Problem Statement

SpiceDB’s metrics server serves both Prometheus metrics and profiling endpoints:

• /metrics
• /debug/pprof/*
• /debug/fgprof

There is currently no way to disable profiling while retaining metrics. --metrics-enabled=false disables the entire server, while the existing --pprof-*-profile-rate flags only control sampling.

Requested behavior

Add a profiling-specific option, preferably disabled by default:

--pprof-enabled=false

When disabled:

• /debug/pprof/* and /debug/fgprof return 404.
• /metrics and other metrics-server behavior remain unchanged.

Solution Brainstorm

No response