Set the organization settings.

budget_ceiling.session is in millicents, at most the platform ceiling, and null clears it. Refused for session tokens (potentially prompt-injected code must not raise the organization's ceiling).