From Pilot to Policy: Governing AI Use Across the Enterprise