Return the token's company-account commercial entitlements. The account is taken from the access token only. payments.personal_cards_on_company_bookings is enabled when the plan includes the feature and the account has not turned it off, not_in_plan when the commercial plan excludes it, disabled_by_account when the plan includes it but the account deactivated it, and unknown when upstream data is missing, malformed, or the provider call failed. This is not a principal capability and not a checkout payment-methods list.