Tenant SaaS status stub (§18.2). Restricted mode limits jeweller admin only; customer app remains usable.