Replication Fork Activation Is Enabled by a Single-Stranded DNA Gate in CMG Helicase