Is this something controlled by the server, or (as I suspect) something that's controlled by the login server?

Neither, at character select it is controlled by the client, same with which cities show on the map. While we can not control what the character chooses to create, as soon as they enter the world their class can be changed to commoner with lua scripts.

Or in the source itself, if you want to take it that far.