Add tenant-scoped kill switch

[baraajack]

Add kill switch v1.

• Add tenant-scoped kill switch state and immutable event log
• Enforce tenant isolation with RLS
• Add authorization deny path for active kill switch
• Reuse existing authorization decision logging and idempotency flow
• Add kill switch control endpoint
• Add service and endpoint tests for halt, clear, and deny behavior