pub fn valid_tenant_role(role: &str) -> bool
Accepts a bounded tenant role identifier without interpreting its authority.