Global defaults. Per-workspace overrides live under Workspaces.
App-wide settings. The public base URL is auto-detected from the request; everything else (provider keys, API versions, defaults) is configured under Social and AI providers.