BuildOS HQ

Customers, tenants, and module licenses. Tenants pull a signed snapshot weekly.

Admin sign-in

Uses Hq:AdminToken from HQ appsettings. Default is the change-me token.