Creates 10 API resource scopes (platform:admin + 9 tenant-level) on the Cameleer SaaS API resource, assigns all to platform-admin role, creates matching organization scopes, and wires them declaratively to org roles (admin gets all, member gets deploy/observe). All operations are idempotent. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>