Feature flags

Release switches, per-client settings and the AI kill switch. Every change needs a reason and is recorded in the audit log.