Auth-based multi-tenant API. Use Authorize (top right) and paste an
accessToken from POST /auth/login. Support accounts acting inside a
tenant must also send the X-Tenant header. Every response uses the envelope
{success, result, message, data, meta, errors}.