Provider restrictions
Limit which providers org members can route through Provider Hub.
Blocked models
Model IDs denied by governance (comma-separated).
Budget controls
Flutter and Tauri clients will consume OrgMembershipPolicy from @ai-pass/shared — see docs/UNIVERSAL-MEMBERSHIP.md.