Part of #31998.

coder templates create --require-active-version makes workspace builds use the template's active version (template admins are exempt). coder templates push has no equivalent flag.

What to change

• New template: set CreateTemplateRequest.RequireActiveVersion.
• Existing template: send UpdateTemplateMeta.RequireActiveVersion only when the user sets the flag.
• License check required. This setting needs the Access Control entitlement. create and `edit` check it before calling the API. Reuse the shared license check from the scheduling flags.

Scope: Small (S), about 20 lines plus a test.

Created on behalf of @angrycub