"""Tenants app — top of the multi-tenant chain.

A tenant is a logical isolation boundary: every scoped row belongs to exactly
one tenant, and the scoped query engine refuses to return rows from another
tenant. The resolver middleware decides which tenant a request belongs to.
"""