Add tenant-aware image policy and migration framework#482

Draft

RavenLLevitt wants to merge 2 commits intomainfrom

cursor/-bc-760fe07d-5ca3-4288-9ec2-08b9702ca872-b82b

Commits on Apr 6, 2026

Add tenant-aware image policy and migration framework

cursoragent
and
RavenLLevitt
committed
Finalize image policy defaults and lock migration decisions

cursoragent
and
RavenLLevitt
committed