Multi-tenancy

• Each organization is fully isolated.
• Data is scoped by org_id in every request.
• Cross-org access is blocked by default.