Code name: seshat

This is the service responsible for tracking which services are deployed for which tenants and deploying new ones when requested.

Use the provisioner to create tenants and assign services to those tenants. The provisioner is responsible for allocating databases, tracking which tenant has access to which applications, and taking care of the "magic" that allows applications to provision their own resources and declare which permissions are available for the application.