feat(org): model grants, org memory, MCP gateway (v2 phases A1-3..5)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

apps/api/app/core/config.py

@@ -130,7 +130,14 @@ class Settings(BaseSettings):
     # >>> agent-1 (org platform): add settings ONLY between these markers
     mcp_gateway_host: str = "127.0.0.1"
     mcp_gateway_port: int = 8765
+    #: The owner's kill switch for the whole gateway (Phase 5). The per-org
+    #: switch lives in ``org_policies.mcp_enabled``.
+    mcp_gateway_enabled: bool = True
     mcp_token_ttl_days: int = 90
+    #: Calls one token may make per minute. Enforced in memory, per gateway
+    #: process — a restart forgives, which is the right trade for a spare
+    #: gateway process that only the owner's own agents talk to.
+    mcp_rate_limit_per_minute: int = 60
     memory_org_char_cap: int = 60000
     platform_invite_ttl_hours: int = 72
     # <<< agent-1