Cost caps

bob bands today's LLM spend into green / yellow / red. Yellow degrades a few features to cheaper paths; red refuses new calls until midnight in your time zone. Crisis safety + embedding writes always run.