### Problem to solve The `experiment_features_enabled` field on the Groups REST API is documented as being returned in the response, but it was never actually wired up in the entity. It's currently a write-only parameter (accepted on `PUT /api/v4/groups/:id` but absent from `GET` responses). Duo CLI needs to read this value to check whether beta/experimental features are enabled for a user's group. ### Proposed solution Expose `experiment_features_enabled` in the Group API entity, gated on `licensed_ai_features_available?` and `:read_group` permission (not `:admin_group`) so non-admin group members can read it.