qa iteration 3

Fresh-DB bootstrap fixes enabling 25/25 pages zero HTTP errors:
- Fix shared.tenants schema mismatch (missing is_default column in init script 16)
- Align migration 000 column set with init script (superset for all modules)
- Seed Authority tenant + stella-ops-ui OAuth client in init script 04
- Widen Platform auth bypass to cover Docker (172.0.0.0/8) and localhost (127.0.0.0/8)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/Platform/StellaOps.Platform.WebService/Program.cs

@@ -228,7 +228,7 @@ if (!string.IsNullOrWhiteSpace(bootstrapOptions.Storage.PostgresConnectionString
     builder.Services.AddSingleton<IPlatformContextStore, PostgresPlatformContextStore>();
     builder.Services.AddSingleton<ITranslationStore, PostgresTranslationStore>();
 
-    // Auto-migrate platform schemas on startup (release, platform, analytics, shared)
+    // Auto-migrate platform schemas on startup
     builder.Services.AddStartupMigrations<PlatformServiceOptions>(
         schemaName: "release",
         moduleName: "Platform.Release",

src/Platform/__Libraries/StellaOps.Platform.Database/Migrations/Release/000_shared_tenants_bootstrap.sql

@@ -1,12 +1,20 @@
 -- Release schema prerequisite for tenant fallback lookups.
 -- Keeps clean-install migration execution independent from optional shared-schema owners.
+-- Column set is the superset of what all modules need (Authority, Platform, etc.).
 
 CREATE SCHEMA IF NOT EXISTS shared;
 
 CREATE TABLE IF NOT EXISTS shared.tenants (
     id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    tenant_id TEXT NOT NULL UNIQUE,
+    name TEXT NOT NULL DEFAULT '',
+    display_name TEXT,
     is_default BOOLEAN NOT NULL DEFAULT false,
-    created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    status TEXT NOT NULL DEFAULT 'active',
+    settings JSONB NOT NULL DEFAULT '{}',
+    metadata JSONB NOT NULL DEFAULT '{}',
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
 );
 
 CREATE UNIQUE INDEX IF NOT EXISTS uq_shared_tenants_single_default