Access follows the user's context
Staff and members belong to organizations; a venue booker may not. The API scopes organization data by tenant and booking data by the booking a user can access.
- Staff, member, and booking surfaces
- Membership-aware routing and revocation
- Module and subscription enforcement
