Tenant provisioning, show and fix-up

[elv-serban]

Provisioning:

• add one more mapped group tenant_uses (called acme - Tenant Users)

• permissions

  • tenant contract fabric object
    • 'manage' permissions for the group Tenant Admins (attention - the tenant contract may not allow this!)

• create content_ops and tenant_ops users (acme_content_ops and acme_tenant_ops)

  • set tenant ID
  • content_ops - member of group Content Admins
  • tenant_ops - member of group Tenant Admins

• add funding user in authd (maybe optional?)

Show:

• show all 3 mapped groups: tenant_admin content_admin tenant_users
• show permissions for the Tenant object (groups with permissions)

[elv-sam]

A few tweaks I made for the new tenancy that we could add to auto setup:

• Add content ops key to Tenant Users group
• Add tenant ops key as manager of Content Admins group
• Set default metadata on marketplace and event site objects (otherwise requires a save in fabric browser for each object, to initialize them)
• Set tenant, marketplace, event site objects to Listable, live stream site object to Viewable