Reseller / multi-tenant management

Resellers and MSPs managing multiple client environments have no way to operate from a single parent account. They currently need separate logins and billing relationships for each client org, making it impractical to scale across their client base. There is no hierarchical account structure, no consolidated billing, and no per-user pricing model suited to reseller economics.

Proposed Solution:

Introduce a reseller/MSP tier with:
1. A parent account that can provision and manage child (client) organisations from a single dashboard.
2. Role-based access scoping — reseller admins can switch between client orgs without separate credentials.
3. Consolidated billing across all child orgs with per-user or per-org pricing.
4. Client-level isolation — each child org's data, users, and configurations are fully separated.
5. Optional white-labelling so the reseller can present the platform under their own brand.

Acceptance Criteria:

1. A reseller can create and manage multiple client orgs from one parent account.
2. Switching between client orgs does not require separate login.
3. Billing is consolidated under the parent account.
4. Client data is fully isolated between orgs.
5. Per-user pricing is configurable at the reseller tier.