Get Budget Ceiling

Narrow read for the three sibling copilots that only need this one integer. GET /{tenant_id} above returns it too, but also every user's email, auth-provider linkage and invite state -- under the same omnipotent admin secret that creates tenants and users. This endpoint is gated the same way but can't leak anything beyond the ceiling.