When `federating` is set to false, all AP routes should be disabled.

We have the option to set federating to disabled, which mostly disables incoming federation and outgoing pushes. It's still possible for other instances to get the 'non-federating' instances users.

We should disable the routes or controller actions that have to do with federation when federating is set to false. This includes

• Anything AP related, like objects, activities, inboxes, outboxes
• Webfinger
• Remote fetching of anything.
• Possibly parts of nodeinfo