Function ensure_write 

pub fn ensure_write(
    registry: &Registry,
    schema: &Schema,
    ctx: Option<&Context>,
    action: WriteAction,
) -> Result<(), String>

表级写判定（叠加在 can_write_schema 之后；upsert 路径裁定按 Insert 判）