Multi-tenant isolation hardening pass
Closed a class of cross-tenant query leaks where legacy null-owner data was visible across accounts. Strengthened the backfill to assign every legacy row to its rightful owner and removed the fallback clauses from 30+ query sites. Webhook delivery, file access, and the public API are now strictly scoped to the authenticated owner.