ensurePeered() now checks the local autoAcceptPeering setting before initiating new peering. When disabled, only admin-explicit peer/initiate and approval-request approve bypass this check. Closes the bypass where client peer/ensure or outbox worker could auto-initiate outward peering even when the admin intended to control all peering.