docs: rank the destructive generator as item 0

It was written up in 4.7 but never made the work order, which is exactly how it
stayed dangerous in the first place.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

examples/inter-app-api-showcase/apps/admin/app/services/catalog.ts

@@ -0,0 +1,16 @@
+import { implement } from "../../../../../../packages/rpc/src/index.ts";
+import { catalogService } from "../../../../packages/shared/src/index.ts";
+
+/** Private service consumed by the workspace's web app. */
+export default implement(
+  catalogService,
+  {
+    getProduct: ({ sku }) => ({ sku, name: "WRNexus Starter", priceCents: 4900 }),
+  },
+  {
+    selfApp: "admin",
+    // Demo policy. Use the admin app's database-backed permission store in production.
+    checkPermission: (permission, subject) =>
+      permission === "catalog:read" && subject?.subjectId === "demo-user",
+  },
+);