Variable CAPABILITY_NAMESConst

CAPABILITY_NAMES: readonly CapabilityName[] = ...

Every catalogue name, in catalogue order. normalizeAllowlist reports its names in this order whatever order a request wrote them in, so one grant has one stored form.