cross-tenant-data-leak-tests

The code shows incomplete tenant isolation in search indexing/querying and cache retrieval. The event consumer also performs an unscoped lookup, and storage retrieval/signing have no tenant checks in this module. These are concrete isolation concerns, not evidence of intentional malware. Use the analysis and probes above as the review plan before implementation.