Administração do tenant

Endpoints de administração exigem admin edit e devem ficar restritos a fluxos backend confiáveis.

Endpoint	Corpo/parâmetros	Permissão
`GET /tenant-admin/settings`	—	`admin edit`
`GET /tenant-admin/bootstrap-status`	—	`admin edit`
`PATCH /tenant-admin/settings`	`locale, timezone, currency, reminder and owner-scope settings`	`admin edit`
`GET /tenant-admin/subjects`	—	`admin edit`
`POST /tenant-admin/subjects`	`name, legalName, taxNo, payee defaults`	`admin edit`
`PATCH /tenant-admin/subjects/:id`	`partial subject fields`	`admin edit`
`DELETE /tenant-admin/subjects/:id`	`id`	`admin edit`
`GET /tenant-admin/members`	—	`admin edit`
`PATCH /tenant-admin/members/:id`	`name, email, roleCode, subjectScope, status`	`admin edit`
`GET /tenant-admin/members/:id/handover-preview`	`id`	`admin edit`
`POST /tenant-admin/members/:id/offboard`	`successorUsorId and transfer options`	`admin edit`
`POST /tenant-admin/owner-transfer`	`newOwnerId`	`admin edit`
`POST /tenant-admin/invitations`	`email, roleCode, subjectScope`	`admin edit`
`GET /tenant-admin/invitations`	—	`admin edit`
`POST /tenant-admin/invitations/:id/resend`	`id`	`admin edit`
`DELETE /tenant-admin/invitations/:id`	`id`	`admin edit`
`GET /tenant-admin/roles`	—	`admin edit`
`GET /tenant-admin/permissions`	—	`admin edit`
`PATCH /tenant-admin/roles/:code/permissions`	`permissions map`	`admin edit`
`PATCH /tenant-admin/roles/:code/workflow-controls`	`controls map`	`admin edit`
`GET /tenant-admin/notification-channels`	—	`admin edit`
`POST /tenant-admin/notification-channels`	`kind, name, target, enabled, secret`	`admin edit`
`PATCH /tenant-admin/notification-channels/:id`	`partial channel fields`	`admin edit`
`POST /tenant-admin/notification-channels/:id/test`	`id`	`admin edit`
`GET /tenant-admin/data-plane`	—	`admin edit`
`POST /tenant-admin/data-plane`	`kind, provider, location, accessMode, endpoint`	`admin edit`
`DELETE /tenant-admin/data-plane/:kind`	`kind`	`admin edit`