#39 FTX-39: Fail-closed tenant scoping sweep

Frozen Principal dataclass; eliminate every principal.get('tenant_id','default') fallback (CI grep gate); fix member list/add IDOR (path-tenant vs caller-tenant); delegation accept/revoke owner checks; cross-tenant reads return 404 (UN-TEN-1). Phase 1.