Shared login, signed tenant token, request-time tenant resolution, platform control-plane, and tenant route boundary.