Tenant creation is platform-scoped — it requires a
super_admin caller.
Everything else here is scoped to the caller’s own tenant unless they’re
super_admin acting via X-Tenant-ID.Tenants
Domains
Users
POST /api/v1/users cannot create a super_admin — that account only
exists via the one-time bootstrap_admin.py script. See
Quickstart.