SanitizeFormConfigOptions

Whether the config originated from JSON (server-driven) or inline TypeScript code.

- 'inline' (default): keeps everything; assumes the config is authored in code and code-only constructs (inline action functions, component kind) are intentional. The default avoids silently stripping inline behaviour during in-process authoring. - 'json': drops code-only addon kinds (component, inline action: function) with a warning, since they cannot survive serialization. Use this when sanitising configs received from a backend / form-builder UI.