Tenant configuration for the Stirrups runtime: workspaces, hook overrides, command allowlists, and audit history.