fix(webapp): early-return reconcile when per-org basins disabled

Without this guard `reconcileBasinForOrg` would still call into
`provisionBasinForOrg` / `reconfigureBasinForOrg`, which both no-op
behind the feature flag, but the reconciler then logged
"provisioned (paid upgrade)" and returned `{ kind: "provisioned" }`.
Misleading on a cloud install where billing is wired but per-org
basins are off — the logs claim work that didn't happen, and we paid
for a billing API round-trip we couldn't act on.

Bail at the top with `{ kind: "skipped", reason: "feature-disabled" }`
so the result and the logs match the actual no-op behaviour.

Author: ericallam

apps/webapp/app/services/realtime/streamBasinRetentionByPlan.server.ts

@@ -18,6 +18,7 @@ import { logger } from "~/services/logger.server";
 import { getCurrentPlan, isBillingConfigured } from "~/services/platform.v3.server";
 import {
   defaultRetention,
+  isPerOrgBasinsEnabled,
   provisionBasinForOrg,
   reconfigureBasinForOrg,
 } from "./streamBasinProvisioner.server";
@@ -60,7 +61,14 @@ export function retentionForPlanCode(code: string | null | undefined): string {
 }
 
 type ReconcileResult =
-  | { kind: "skipped"; reason: "billing-not-configured" | "org-not-found" | "free-no-basin" }
+  | {
+      kind: "skipped";
+      reason:
+        | "billing-not-configured"
+        | "feature-disabled"
+        | "org-not-found"
+        | "free-no-basin";
+    }
   | { kind: "provisioned"; retention: string }
   | { kind: "reconfigured"; retention: string }
   | { kind: "deprovisioned" };
@@ -96,6 +104,15 @@ export async function reconcileBasinForOrg(orgId: string): Promise<ReconcileResu
     return { kind: "skipped", reason: "billing-not-configured" };
   }
 
+  // Feature flag is the master switch for the whole per-org basin
+  // pipeline — `provisionBasinForOrg` / `reconfigureBasinForOrg` both
+  // no-op when it's off. Bail here so the reconcile log lines and
+  // result kinds reflect reality (no "provisioned (paid upgrade)" log
+  // for a no-op call), and skip the billing API round-trip entirely.
+  if (!isPerOrgBasinsEnabled()) {
+    return { kind: "skipped", reason: "feature-disabled" };
+  }
+
   const plan = await getCurrentPlan(orgId);
   if (plan === undefined) {
     throw new Error(