Feature flags & remote config

Evaluated per tenant; consumed by web and mobile via /api/v1/platform/config/public.