Open Tenants (/tenants). Admin writes.
A tenant with slug default is seeded. Omit tenant_id on prefix create to use it. Most labs never add a second tenant.
Create a tenant (slug + name), then attach prefixes. Rename patches name only. Plan can filter by tenant.
Readonly can list. API: GET/POST /api/v1/tenants, PATCH /tenants/{id}.