Taming AI Code Sprawl With Harness Feature Flag Policies