Phase 1 foundation

Platform control for tenant onboarding

Authenticate against the platform Keycloak realm, provision tenant boundaries, and inspect saga diagnostics from a single operator console.

Local seed credentials are prefilled for the first run.