pub const UNSPECIFIED_TENANT: TenantId = 0;
Reserved tenant ID meaning “no tenant specified” (backward-compat default).