PURE · Merger · P1 tagging
Tag each surface to the orgs that should see it. This is what drives the per-org home — no hardcoded per-org pages.
Reads mcp_surface_tags; writes mcp_surface_tag_set(p_surface, p_org, p_on) — auth-only, with a fail-soft relay. Backing table: pure_surface_orgs.