Multi-tenant account boundaries
Platform admin plus per-restaurant accounts, roles, and permissions, with data kept separate by tenant. Discovery defines which teams see which locations, menus, orders, and reports, and what the platform owner can and cannot change on behalf of a tenant.