Tenant configuration rollout orchestration workflow

[Wilfred007]

What

Tenant configuration rollout orchestration workflow.

Why

Rolling out a configuration change across a tenant's environments has no staged, verifiable workflow.

Scope

In scope:

• Define and implement the workflow steps described against tenantConfigService.ts
• Error handling and retry behavior for each step
• Observability (logging/tracing) for workflow execution
• Tests covering the happy path and at least one failure path

Out of scope:

• Redesigning the underlying service being orchestrated
• Building unrelated workflows not described in this issue
• New UI beyond what's needed to observe workflow status

Acceptance Criteria

• Workflow completes successfully on the happy-path fixture
• Workflow retries/handles at least one designed failure case
• Execution is observable via logs/traces
• Tests pass in CI

Technical Context

• Relevant files: tenantConfigService.ts
• New surface area: this is part of the Mastra AI integration (greenfield) — coordinate with whichever foundation/infra issues (agent runtime bootstrap, tool registry, auth scoping) have landed so far