Fetches and caches the legal configuration. Call once at SDK init so the accessors below have a warm cache.