Multi Tenant

[wolfie82]

It doesnt look like the multi-tenancy is working out of the box; hard tenants. I had issues with the github workflow template expecting plan and apply template variables for the service account. Additionally I had to manually set test_principle because it wasnt able to resolve the data resource for resman_sa. There were a few more issues, so I jumped to use lightweight multi tenants. Setup is easy, but are there any examples or guidance in terms of what the org level service accounts should be doing vs the tenant level? Hard tenants are a bit easier to reason about given they follow the same structure with other stages.