pg-uses-project-id-for-multi-tenancy

Summary

All database queries in the PgApi layer are scoped to a specific project, so one project's data can never leak into another's. This is enforced structurally through composite primary keys and mandatory project_id filtering, meaning multi-tenancy isolation is baked into the data model rather than relying on application-level checks.