Backend: TenantProvisioner interface, DockerTenantProvisioner, vendor API (create/provision/suspend/delete), tenant portal API (dashboard/license/OIDC/team/settings). Frontend: route restructure (/vendor/*, /tenant/*), persona-aware Layout, 8 new pages. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>