tenant fixes

src/VexLens/StellaOps.VexLens.WebService/Program.cs

@@ -5,6 +5,7 @@ using OpenTelemetry.Resources;
 using OpenTelemetry.Trace;
 using Serilog;
 using StellaOps.Auth.ServerIntegration;
+using StellaOps.Auth.ServerIntegration.Tenancy;
 using StellaOps.VexLens.Api;
 using StellaOps.VexLens.Consensus;
 using StellaOps.VexLens.Persistence;
@@ -71,6 +72,7 @@ builder.Services.AddRateLimiter(options =>
     });
 });
 
+builder.Services.AddStellaOpsTenantServices();
 builder.Services.AddStellaOpsCors(builder.Environment, builder.Configuration);
 
 // RASD-03: Register scope-based authorization policies for VexLens endpoints.
@@ -100,6 +102,7 @@ if (app.Environment.IsDevelopment())
 app.UseStellaOpsCors();
 app.UseAuthentication();
 app.UseAuthorization();
+app.UseStellaOpsTenantMiddleware();
 app.TryUseStellaRouter(routerEnabled);
 app.UseRateLimiter();
 app.UseSerilogRequestLogging();