Tenant architecture
- Per-hospital database isolation
- Tenant registry for platform owners
- Tenant-aware routing from hostname or session
- Per-tenant document and upload storage
- Per-tenant Telegram notification configuration
- Import and export boundaries enforced server-side
