Split out of the #623 shared-cluster/N:1 epic so it isn't lost when that epic closes as v0.4.0-shipped. PR-13 (namespace-per-tenant) was the one in-epic item NOT shipped in v0.4.0. Tracks: per-tenant namespace provisioning + the executor/RBAC/netpol wiring to run each tenant's task pods in its own namespace. Relates to #508 (tenant isolation is a caller convention, not a SQL predicate) and #209 (tenant-blind aggregation).
Split out of the #623 shared-cluster/N:1 epic so it isn't lost when that epic closes as v0.4.0-shipped. PR-13 (namespace-per-tenant) was the one in-epic item NOT shipped in v0.4.0. Tracks: per-tenant namespace provisioning + the executor/RBAC/netpol wiring to run each tenant's task pods in its own namespace. Relates to #508 (tenant isolation is a caller convention, not a SQL predicate) and #209 (tenant-blind aggregation).