Replace remaining executable-code mevy assumptions with config-derived values. This updates operator messaging, runtime prompts, agent-task role defaults, inspect-system fallbacks, and OpenRouter metadata headers to follow PLATFORM_SERVICE_NAME, PLATFORM_ID, TENANT_ID, and PROJECT_ROOT instead of the live example tenant.
---
Build: pass | Tests: FAIL — Tests 3 failed | 2089 passed (2092)
Move controlplane worker jail naming off tenant identity and onto the shared platform service identity. Also update operator-facing controlplane scripts so their error messages describe the platform service instead of implying tenant ownership.
---
Build: pass | Tests: pass — 103 passed (6 files)