New client requests land here as pending. Nothing is auto-provisioned yet — approve here, then provision the tenant instance by hand until the backend control plane exists.