SaaS multi-tenant CI/CD and release isolation patterns

Single vs multi-tenant release topologies, shared pipelines vs tenant-dedicated environments, artifact promotion, blue-green/canary, tenant-level rollback, and secrets isolation.