a Tenant owns a Workspace (multi-tenant ownership of project context — distinct from BudgetPolicy.owns_budget)