Differences from the two docs (user-flow + session-config-summary) in the current implementation:

1) Subscriptions throttling still impacts normal users  
- Docs expect “plans fetch should not be throttled” and smooth onboarding; in practice, `/v1/auth/subscriptions/` is still returning 429s for normal users until the backend restart picks up the relaxed scope.

2) Payment methods are not auto-present for all accounts  
- Docs assume payment methods are available so plan selection isn’t blocked. Account 29 had none until we inserted bank_transfer and PK manual; the UI showed “No payment methods available.”

3) Enterprise plan is hidden for non-aws-admin  
- Not called out in the docs; current UI filters out Enterprise for normal tenants.

4) Onboarding friction from auth/plan calls  
- Docs expect a seamless redirect and retry-once for 429; current flow still shows visible errors (429/403) when token is missing/expired or when subscriptions are throttled.