Admin UI
— internal: tenants, all extensions, prompts, transcripts, audit
Tenant Portal
— customer self-serve, scoped to their tenant
