Summary#

• Add owner column (default 'AgentSDE') to TaskEntity, JobEntity, and WebhookDeliveryEntity for multi-tenant data isolation
• Update TaskEntity unique constraint from ['issue', 'repo'] to ['owner', 'issue', 'repo']
• Create TenantModule with TenantConfigService that reads the tenant org from ConfigService
• Inject TenantConfigService into TaskStateService, SqliteJobQueue, and WebhookController; scope all DB queries by owner
• Update all affected unit and integration test modules with TenantConfigService mocks
• Fix pre-existing watchdog.service.spec.ts flakiness: pin STUCK_THRESHOLD_MS/SLOW_THRESHOLD_MS env vars in beforeEach so tests are environment-independent

Test plan#

• All 756 unit and integration tests pass
• TaskStateService queries (findByIssueAndRepo, findByStatus, findByStatuses, findAll, createTask) all scoped by owner
• SqliteJobQueue queries (onModuleInit, enqueue, processNext) all scoped by owner
• WebhookController sets owner on every WebhookDeliveryEntity save
• Integration tests (replan-directive, restart-directive, blocked-persistent-*) all pass with TenantConfigService mocks
• Lint clean (npm run lint zero warnings)

Closes #355

🤖 Generated with Claude Code