Feature flags

The capability catalogue. Each flag is gated by a required tier; the resolver compares the tenant's live licence against this requirement on every entitlement check.