List every feature flag with its stored overrides (platform admin)

The compile-time flag registry (services/store/flags) unioned with the stored FLAGS rows on the config table: each flag's scope, code default, stored default, and per-subject overrides. A stored key with no registry entry is returned with orphaned:true (cleaned up out of band, never toggled here).