(tenant-admin) route group

Dashboard

Tenant admin shell — auth, sidebar, and modules land in Phase 1–3.