Manage the platform without crossing tenant sessions.

Platform access uses dedicated tokens, refresh handling, and route guards. Tenant Facility context is never attached to these requests.