Admin Set App Entitlement

Comp an app a tier it is not paying for, or revoke the comp.

Touches no Stripe object and does not move the usage allowance: the customer keeps the invoice and the included usage they have, and gains the capability. billing_exempt is NOT the tool for this — it means "no billing at all", so using it to do someone a favour would stop charging them.

LogtoAdminUser, not AdminUser, for the same reason grant_ai_credit is: the in-app admin role is a row in a table, and giving away revenue is not something a row should be able to authorize.