feat: enforce tenant isolation and shared question bank

Tiku.IntegrationTests/Api/ProfileEndpointTests.cs

@@ -183,7 +183,7 @@ public sealed class ProfileEndpointTests
         Assert.Equal(HttpStatusCode.OK, feedbacksResponse.StatusCode);
         Assert.Single(feedbacksJson.RootElement.EnumerateArray());
 
-        using var scope = factory.Services.CreateScope();
+        using var scope = factory.CreateSystemScope();
         var dbContext = scope.ServiceProvider.GetRequiredService<TikuDbContext>();
         Assert.Equal(NotificationStatus.Read, dbContext.UserNotifications.Single(item => item.Id == notificationId).Status);
         Assert.Single(dbContext.ReportStatusEvents);
@@ -237,7 +237,7 @@ public sealed class ProfileEndpointTests
             "/api/auth/login/password",
             new PasswordLoginDto
             {
-                TenantId = seed.TenantId,
+                TenantCode = seed.TenantId.ToString("N"),
                 Phone = seed.Phone,
                 Password = "passw0rd!"
             });