Where per-tenant configuration lives, how it is versioned, promoted between environments and tested. Distinct from application config.