Docs-Writer Settings and Organizations UI Polish

Seen on prod Settings while photographing it as an org owner (Task 8303): 1. Mark a Settings category whose every section is plan-gated (Retention on a plan without it) in the category list, so an admin does not open a page of two upgrade notices. 2. On Settings › Organizations, the tab row shows SSO, SCIM, IP allowlist, Audit export and Staging even when the plan leaves them out; mark those tabs (or the banner should link each), so the upgrade line and the tabs agree. 3. The Organization Access roster lists the same person twice (a direct Org Owner row and an Org Admin row via a group); fold them into one row naming both sources. 4. The read-only note above a category ("Ports: set by an operator…") sits flush with the page edge, outside the section cards; align it with the cards. 5. The Range starts empty line uses "auto-assigned" and the panel's "vars" wording; say "variables" and match the Ports section's labels. Out of scope: any change to what a setting does, plan gating rules, or operator-only areas. Done means: - Each item above is changed or explicitly declined with a reason in the PR. - ./dc check quick and the changed-area web tests pass.

Fixed the Settings note inset, Range starts "variable"/auto-assign wording, and the Access roster now shows one row per person naming each grant. Items 1–2 declined: Task 8336 already hides off-plan categories and tabs. Quick gate and 628 web tests green; PR #6444 merged; its deploy was superseded by a newer develop deploy. Follow-ups: draft 8395.