What happened
The organization was on a comp/trial (parked on the internally-managed enterprise plan) and an administrator ended the trial. Product and data-plane access — API keys, MCP, and Radar — is blocked until the organization converts to a paid plan. The enterprise subscription is intentionally still live, so this is not the same asno_active_plan: the organization has an active plan, but access is
held until a paid plan is chosen. Choosing a paid plan is therefore a plan
change (PUT), not an initial selection (POST).