Platform security and customer data isolation

Strengthen permissions across customer apps, builds, artifacts, and operator infrastructure. Every customer should access only their own resources while platform owners retain the management access they need.