Org-level AI configuration (separate card from per-project knobs). Provider choice (Anthropic, OpenAI, OpenRouter), encrypted key storage (pgsodium), monthly spend cap (USD), per-user rate limit (default 30/hour), redaction toggles ("never send private board content", "never send PII"). Stored in a new ai_settings table keyed by org_id.

Powers every AI feature in Hollahoop: existing duplicate detection + changelog drafting + the new AI Suggest card. When unset, AI features fall back to template/heuristic mode (we never silently 0-key-call). Visible spend meter on the org settings page so admins can see the bill in real time.