Function parse_capability 

pub fn parse_capability(s: &str) -> Option<Capability>

Parse a single capability string. Returns None for unknown strings; callers decide whether to log a warning or fail.