// Package catalogtenant implements the durable Catalog owner for tenant
// namespace reservations, exact OrgID bindings, and tenant-owned layout-bundle
// slots.
//
// Every command is terminal in one transaction: it locks the authority fence
// and exact current/dependency rows, records an immutable outcome, appends
// value history when applied, and compare-and-swaps the current value. Exact
// request-digest retries return the stored outcome without re-evaluating
// current state. Tombstoned identities are never deleted or revived.
//
// The package also verifies one exact source-required tenant-owned BundleKey
// while the Catalog source and tenant authority facts remain locked. Successful
// verification returns immutable evidence and a receipt together with an
// opaque, process-local capability; none of those values mutates authority
// state.
//
// This package does not own layout revisions, assignments, serving selectors,
// receipt-set assembly, or publication coordination.
package catalogtenant