Platform admin

Company-only access for provisioning tenants, managing AWS settings, and reviewing audit events.