Get tenant information

Tenant response for service-to-service callers and connector editors. Identical to tenant but also exposes the CloudFormation-managed networking security groups, which the id-based read and update return to internal callers (e.g. the instance-manager) and to users who may deploy connectors or data apps (ts-admin, or orgAdmin, tenantAdmin, developer, dataOwner or analyst in the scoped org — data-acquisition reads them with the deploying user's JWT), but strip for everyone else. Cognito credentials are never included here — only createTenantResponse returns those.