Series A flags: fix the billing model before the meter bites

You hire two engineers. Proper hires. They need to ship behind flags like everyone else, which means they need console access, not a shared password and a Slack thread titled “please flip staging”.